setuid root CGI's - how bad it is?

["Eloy A. Paris" <eparis@ven.ra.rockwell.com>]

Hi,

(sorry for the off-topic question but I don't know where to ask)

Excuse my ignorance but how bad is it to have a setuid CGI script?
I know there should be big security issues with this but I don't
know what it is.

I have a CGI script that needs to write files in a user's home directory.
How can I do that?

Thanks and my apologies for being off-topic again.

E.-

-- 

Eloy A. Paris
Information Technology Department
Rockwell Automation de Venezuela
Telephone: +58-2-9432311 Fax: +58-2-9431645


--
TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word "unsubscribe" to
debian-user-request@lists.debian.org . Trouble? 
e-mail to templin@bucknell.edu .