Re: Watch out for "#!/usr/local/bin/perl5" in migration

Article View: best.migration

Article #14

#14

From: Malcolm Hoar
Date: Thu, 18 Oct 2001 20:56

26 lines
2147 bytes

In article <9qnea6$1fa5$1@nntp1.ba.best.com>, inwap@best.com (Joe Smith) wrote:

>It is an automatic process that converts BESTWWWD-specific SSI directives
>to Apache style directives.
[...]
>This is what the majority of users would want: no effort on
>my part, just make sure that my site works.

By all means, make the script/process available for execution 
by the user -- even via a web form (with some authetication).

But doing it anyway makes me queasy. In addition to the legal
issues Todd mentioned, there is scope for unintended consequences
including the introduction of security vulnerabilities.

I'm not too concerned about the site that I still have at Best.
But I wouldn't be happy if this were done to sites I have
hosted elsewhere.

Making the script available is a Good Thing. Executing it without
some permission/checkpoint is a Bad Thing.

-- 
Malcolm Hoar
malch@malch.com
Kant spell Neetchie

Technical Details

Message-ID: <9qnfll$1fal$1@nntp1.ba.best.com>

Path:

arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!sn-xit-02!supernews.com!newsfeed.direct.ca!look.ca!newshub2.rdc1.sfba.home.com!news.home.com!enews.sgi.com!news2.best.com!nntp1.ba.best.com!malch

References: <9qm1qn$1db2$1@nntp1.ba.best.com> <9qn26c$1094$1@machaut.medieval.org> <9qnea6$1fa5$1@nntp1.ba.best.com>

Show Full Headers

Complete Article Headers

X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: f9f6d,941234d3c34a9844
X-Google-Attributes: gidf9f6d,public
X-Google-Thread: 11488e,941234d3c34a9844
X-Google-Attributes: gid11488e,public
X-Google-Thread: fdc27,941234d3c34a9844
X-Google-Attributes: gidfdc27,public
X-Google-ArrivalTime: 2001-10-18 13:56:31 PST
Path: arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!sn-xit-02!supernews.com!newsfeed.direct.ca!look.ca!newshub2.rdc1.sfba.home.com!news.home.com!enews.sgi.com!news2.best.com!nntp1.ba.best.com!malch
From: malch@malch.com (Malcolm Hoar)
Newsgroups: best.migration,best.general,best.www
Subject: Re: Watch out for "#!/usr/local/bin/perl5" in migration
Date: Thu, 18 Oct 2001 20:56:22 GMT
Organization: Malch Enterprizes
Lines: 27
Distribution: best
Message-ID: <9qnfll$1fal$1@nntp1.ba.best.com>
References: <9qm1qn$1db2$1@nntp1.ba.best.com> <9qn26c$1094$1@machaut.medieval.org> <9qnea6$1fa5$1@nntp1.ba.best.com>
NNTP-Posting-Host: adsl-64-172-54-82.dsl.snfc21.pacbell.net
X-Trace: nntp1.ba.best.com 1003438582 48469 64.172.54.82 (18 Oct 2001 20:56:22 GMT)
X-Complaints-To: abuse@best.com
NNTP-Posting-Date: Thu, 18 Oct 2001 20:56:22 +0000 (UTC)
X-Newsreader: News Xpress 2.01

Reply to Parent Message