[Xitami] Urgent security issue (disable DL from in CGI bin??)

[MRJ InfoTech Admin]

Anwsering my own question after reading up a bit on this, I would assume 
under the Xitami.cfg [CGI] section


#   If 1, allows images, HTML, and other files in the cgi-bin
#   directory. The CGI program can refer to these using relative
#   addressing. If 0, such files are not permitted. Note that in any
#   case, executable files (such as Perl scripts) are always executed,
#   never downloaded.

     mixed-url=1


should be set to 0 to avoid any troubles?



At 07:54 10/02/2006, you wrote:
>How do I resolve this the best way?
>
>Any file, not directly executable stored in the CGI-BIN can be downloaded 
>in a browser by simply pointing at it.
>In IIS for instance you can turn that behavior off and only allow execute 
>but not download.
>
>Is that possible in Xitami too?