[Xitami] CGI arguments passing (newbee question)

[Ewen McNeill]

In message <NGBBJAFHALILDOAFEDNAEEDJCAAA.egbert@familie-egberts.tk>, "E. Egberts" writes:
>I'm trying to implement a couple of Perl scripts which expect their
>arguments in the $ARGV array. Can I configure the Xitami web server (version
>2.4d9) such that arguments are passed through this array in stead of the CGI
>envirionment variable QUERY_STRING?

Set [CGI] passargs=1.  It's set to 0 by default, because there are
security risks in passing anything that comes in the query string on the
command line (eg, on some OS certain arguments can be used to run
another command).  Xitami tries to defend against some of the more
obvious ones, but by no means are we certain that it's secure.

If you don't want to set that option, I'd suggest either a wrapper
program to pull query string apart, check the arguments, and then run
the other program; or use a different CGI script that parses
QUERY_STRING as per the CGI spec.

Ewen

-- 
Ewen McNeill, Technical Consultant, iMatix Corporation  www.imatix.com