*****SPAM***** Re: [Xitami] Xitami Pro and CGI

[Pieter Hintjens]

"Neil Finlayson" <nfinlayson@neco-services.mine.nu> wrote:

> But before i upgraded i had such directories as
> test/somedir/cgi-bin/some.cgi
> which all worked fine.

Check the wildcard setting in the [CGI] section of defaults.cfg.  It 
is possible that you changed this in Xitami.cfg when you originally 
installed Xitami (instead of creating defaults.cfg) and have now lost 
the setting after reinstalling Xitami/Pro.

This is the relevant setting:

[CGI]
#   Defines whether the CGI URL indicator ('/cgi-bin') is allowed
#   anywhere in the URL, or only at the start. If 1, it is allowed
#   anywhere in the URL. If 0, it may come only at the start of the
#   URL. Note that setting this to 1 opens a significant security
#   hole, if you also allow people to FTP files into the HTTP area. As
#   soon as someone creates a directory called /cgi-bin, they can
#   upload, and execute, CGI programs.

    wildcard=0

-
Pieter Hintjens
iMatix Corporation