[Xitami] CGI arguments passing (newbee question)

[E. Egberts]

Ewen,
thanks for your reaction, it indeed solved this issue!

When the particular script runs, it should however produce a simple text in
the browser but a download action is initiated in stead. The actual outcome
is what I expect.

The pipexxxx.cgo file lookes like this:

	Content-type: text/plain
	Pragma: no-cache
	Cache-control: no-cache
	Expires: Mon, 28 Apr 1997 00:01:00 -0500

	c0=42
	vr=99AX

I have seen it working correctly but apparently I have changed something in
the configuration but I don't know what!
And I hope you can help me out again.

Thanks



-----Oorspronkelijk bericht-----
Van: xitami-admin@lists.xitami.org
[mailto:xitami-admin@lists.xitami.org]Namens Ewen McNeill
Verzonden: woensdag 17 april 2002 22:43
Aan: xitami@lists.xitami.org
Onderwerp: Re: [Xitami] CGI arguments passing (newbee question)


In message <NGBBJAFHALILDOAFEDNAEEDJCAAA.egbert@familie-egberts.tk>, "E.
Egberts" writes:
>I'm trying to implement a couple of Perl scripts which expect their
>arguments in the $ARGV array. Can I configure the Xitami web server
(version
>2.4d9) such that arguments are passed through this array in stead of the
CGI
>envirionment variable QUERY_STRING?

Set [CGI] passargs=1.  It's set to 0 by default, because there are
security risks in passing anything that comes in the query string on the
command line (eg, on some OS certain arguments can be used to run
another command).  Xitami tries to defend against some of the more
obvious ones, but by no means are we certain that it's secure.

If you don't want to set that option, I'd suggest either a wrapper
program to pull query string apart, check the arguments, and then run
the other program; or use a different CGI script that parses
QUERY_STRING as per the CGI spec.

Ewen

--
Ewen McNeill, Technical Consultant, iMatix Corporation  www.imatix.com

--
Xitami Users Mailing List -- For Xitami support
To unsubscribe: http://lists.xitami.org/mailman/listinfo/xitami