[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#263038: apache2-mpm-prefork: cgi-bin doesn't seem to work



On Mon, Aug 02, 2004 at 12:38:03 -0700, Diwaker Gupta wrote:
> On pointing my browser to /awstats/first.pl, the browser tries to download
> the perl file, instead of showing the output as HTML.

Isn't this a security issue? CGI scripts can contain sensitive data (e.g.
authentication details for databases).

IMO if the "cgi-script" handler is specified for a particular extension and
the CGI module isn't available, apache2 should produce an internal error,
not display the script.

Ray
-- 
"Text processing doesn't matter."  Fortran.
	Larry Wall on common fallacies of language design



Reply to: