httpd-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Petr Hracek <phrac...@gmail.com>
Subject Re: [users@httpd] Running script CGI with IncludesNOEXEC
Date Wed, 18 Jan 2012 17:37:16 GMT
And how to do that correctly?
Any example?
Petr

Dne 18. ledna 2012 16:24 Eric Covener <covener@gmail.com> napsal(a):
> On Fri, Jan 13, 2012 at 3:54 AM, Petr Hracek <phracek2@gmail.com> wrote:
>> Dear user,
>>
>> I have a question.
>> I need to run from my page CGI script but in the /var/log/apache2/error_log
>> I see:
>> [Fri Jan 13 10:12:45 2012] [error] [client 10.7.254.58] unable to
>> include potential exec "./testdiag.cgi" in parsed file
>> /opt/apache2/htdocs/index.shtml.en_US
>
> I think the doc is wrong/misleading and IncludesNoExec stops
> "#include virtual" of CGI scripts in a roundabout way.
>
>
>>
>> in the configuration file is mentioned:
>> <Directory /opt/apache2/htdocs/>
>>    Options IncludesNOEXEC -MultiViews -FollowSymLinks
>>    Order deny,allow
>>    Allow from all
>> </Directory>
>>
>> AddHandler cgi-script .cgi
>> AddHandler server-parsed .shtml
>> <FilesMatch "\.(cgi|cgi.en_US|cgi.de)$">
>>    Options +ExecCGI -MultiViews -FollowSymLinks
>> </FilesMatch>
>>
>> in the apache2 documentation is mentioned:
>> IncludesNOEXEC
>>    Server-side includes are permitted, but the #exec cmd and #exec
>> cgi are disabled. It is still possible to #include virtual CGI scripts
>> from ScriptAliased directories.
>>
>> How to do that so that CGI script will work
>> My CGI  script has of course permissions 750
>>
>>
>> --
>> Best Regards / S pozdravem
>> Petr Hracek
>>
>> ---------------------------------------------------------------------
>> The official User-To-User support forum of the Apache HTTP Server Project.
>> See <URL:http://httpd.apache.org/userslist.html> for more info.
>> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
>>   "   from the digest: users-digest-unsubscribe@httpd.apache.org
>> For additional commands, e-mail: users-help@httpd.apache.org
>>
>
>
>
> --
> Eric Covener
> covener@gmail.com
>
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
>   "   from the digest: users-digest-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
>



-- 
Best Regards / S pozdravem
Petr Hracek

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Mime
View raw message