Web Hosting Talk : Web Hosting Main Forums : Hosting Security and Technology : CGI/php

[babak]

Hi guys,


If you run the folowing php-scrip:
<?php readfile('/etc/passwd'); ?>
You get the passwords!! So I set php in safemode.

1.) Is this also avaibale in cgi?

IF YES: whitch script do you need?
IF YES: How to turned off? How to not allow anybody to see files in a dir after /home/sites/ ?

If NO: THANKS GOD!!!

Regards,
Babak

[Rich2k]

Using Perl on a server is actually a bigger security risk than PHP.

Basically you can't completely block out Perl even with a CGI Wrapper e.g. try installing something like admin pro on your system.

It allows you to view all the filesystem but you can't read them.

[roly]

Yup
With cgiwrap (search for it @ www.google.com)