[Xitami] #exec cmd= in Win XP

Charles Duval xitami@lists.xitami.org
Tue, 9 Dec 2003 15:28:44 -0500


I am trying to use a CGI to copy content on one directory to another on my
Web server to update information on a ramdisk.  I have set the environment
variable SSI_INSECURE to YES, but it's still not working.  I've tryed 2
ways:

- Through a compiled CGI program.  If I run the CGI from the DOS command
prompt, it runs fine.  But when I try to run it from the Browser using
http://mywebadresse/cgi-bin/doCopy2RamDsk.exe (or even without the .exe) it
displays the text that I've programed into the CGI, but it does not execute
my copy command nor does it display an error of some kind.

- Using #exec cmd="c:\windows\system32\xcopy d:\webpages r:\ /e" (remember
that SSI_INSECURE is set to YES) inside a HTTP page.  I get '[xitami SSI
: ]' which is an error I beleive.  I've tryed to replace the 'xcopy' command
with a "dir" or "set" to see if I would get an output of some kind.  But I
still get the same message: '[xitami SSI : ]'

I use Xitami version 2.5b5 and Windows XP Pro.  Is this a security issue
with WinXP that does not allow me to run system commands from within a CGI?
If so, how can I get aroung it.

Does anyone have any suggestions?

Thanks!