[Xitami] security question about Xitami & CGI's

[admin]

At 05:50 PM 10/15/2004 +0200, you wrote:
>Hello !
>
>Any cgi program has the same right as the webserver.
>Under windows nt5, you can create a specific user with limited rights and 
>run the webserver as this user.
>
>First create a new user with the correct access rights, then change the 
>Xitami rights to that of the user (start/programs/administrative 
>tools/services, and locate Xitami somewhere at the end of the list, right 
>click on the log on as and change to the new user)

Thanks I'll try changing the settings for this.
I run the Xitami in console mode though and not as a service.
I'll go check what it looks like.


>You should not allow other people to run cgi programs, unless you secure 
>your server.
>It's never a good idea to let others upload programs to the cgi directory. 
>It will always be a security risk.
>
>marc

True indeed Marc, but you know, clients want... and they want more after 
that :)
Maybe I'll have to get clients who only have my site designs, then I can 
control it better but that's a bit hard.
I have to find a nice middle way somehow.