Article View: comp.lang.perl.misc
Article #22Re: Help!!! My System Admin. won't accept Perl scripts.
From: Stephen Potter
Date: Sat, 04 May 1996 00:00
Date: Sat, 04 May 1996 00:00
40 lines
2745 bytes
2745 bytes
In article <318709AF.2A95@daemon.apana.org.au> "Frank C." <chopperb@daemon.apana.org.au> writes:
I am almost ready to launch my own home page which contains an
interactive Web spot requiring a Perl script. However my system
administrator will not accept Perl because of the alleged security
problems. My own research reveals that most interactive Web pages -
approximately 80% - use Perl scripts to execute them. Thus I require
advice on the following matters:
1. What security hazard does Perl actually pose?
Perl doesn't pose any more security problems than any other language. Ask
your administrator if he'll accept something else (a shell script, for
example). Any language can be a security hazard if your server is set up
incorrectly. The majority of all problems can be fixed simply by running
the server as user "nobody". You will want to make sure that your script
runs correctly under the -w flag as well as "use strict subs/vars". Also,
check out the section on security in the Camel book or the perlsec manpage.
2. How do I rectify the problem i.e. where can I get a suitable CGI
script?
This will be up to your admin. He may simply say "no CGI", except system
staff or something like that. If that is the case, you're probably stuck.
Or you can use the old "vote with your feet" paradigm: go to another
provider, or if this is work try complaining to his boss.
3. Is there anybody out there who is prepared to assist me in putting
together a CGI-bin script for a fee? I live in Melbourne, Australia.
If you'll pay travel expenses. ;-)
-spp
--
Stephen P Potter Pencom Systems Administration Mobil Global Financial Markets
spp@psa.pencom.com Pager: 1-800-759-8888, 187-0318 Work: 703-860-2222
Maintainer of <A HREF="http://perl.com/perl/faq/">Perl FAQ List</A>
"I'm supposed to be their God, and I've broken five of their commandments
already. I'd've broken all six, but there aren't any sheep on board."
-Dave Lister, 3rd technician, Red Dwarf
Technical Details
Message-ID:
<SPP.96May4102937@psisa.com>Path:
arc1-ca.pugleaf.net!unknown!not-for-mailReferences:
<318709AF.2A95@daemon.apana.org.au>Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: 14a068,6ef653bb52414c58 X-Google-Attributes: gid14a068,public X-Google-Thread: fc7b2,6ef653bb52414c58 X-Google-Attributes: gidfc7b2,public X-Google-Thread: fa0ae,6ef653bb52414c58 X-Google-Attributes: gidfa0ae,public From: spp@psisa.com (Stephen Potter) Subject: Re: Help!!! My System Admin. won't accept Perl scripts. Date: 1996/05/04 Message-ID: <SPP.96May4102937@psisa.com> X-Deja-AN: 152974595 references: <318709AF.2A95@daemon.apana.org.au> organization: Pencom Systems Administration -- Opinions are poster only. newsgroups: comp.lang.perl.misc,apana.melb.general,alt.internet.services