Re: [GENERAL] cgi with postgres

On Friday 14 January 2000, at 16 h 55, the keyboard of Jeff MacDonald
<jeff@hub.org> wrote:

>     make cgi dir 711
>     big deal, they can get the name of the file
>     from the web, and copy it.

My CGIs sources a config file, in mode 700, only readable by 'www' (the user
which executes Apache).

I adopted this after a CGI was inadvenrdently made available on the Web, in
source form :-)

If you have CGI authors you do not trust, have two Apache, with different IDs.

>     this is assuming they already have an account
>     on the machine, something that cannot be ruled
>     out.

Unix file protections are enough against local users.