17 Mar
2002
17 Mar
'02
12:50 p.m.
Here's the situation: I have a Perl CGI script which references a file. The second file contains a password.
The password is required to access the database which is used by the CGI application I'm writing.
Now the Perl CGI file definitely has to be readable and executable by the webserver. What about the file with the password? It should also be readable by the webserver daemon.
Problem is that anyone else whose scripts run on the same server can simply cat the file using their own CGI scripts and se ethe passwords etc.
So how is this fixed?
--
Satya. URL:http://satya.virtualave.net/
Cap'n! Cap'n! the UART's will'nae take the speed!