🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: comp.lang.perl.misc
Article #22

Re: Help!!! My System Admin. won't accept Perl scripts.

#22
From: Stephen Potter
Date: Sat, 04 May 1996 00:00
40 lines
2745 bytes
In article <318709AF.2A95@daemon.apana.org.au> "Frank C." <chopperb@daemon.apana.org.au> writes:
   I am almost ready to launch my own home page which contains an 
   interactive Web spot requiring a Perl script. However my system 
   administrator will not accept Perl because of the alleged security 
   problems. My own research reveals that most interactive Web pages - 
   approximately 80% - use Perl scripts to execute them. Thus I require 
   advice on the following matters:

   1. What security hazard does Perl actually pose?

Perl doesn't pose any more security problems than any other language.  Ask
your administrator if he'll accept something else (a shell script, for
example).  Any language can be a security hazard if your server is set up
incorrectly.  The majority of all problems can be fixed simply by running
the server as user "nobody".  You will want to make sure that your script
runs correctly under the -w flag as well as "use strict subs/vars".  Also,
check out the section on security in the Camel book or the perlsec manpage.

   2. How do I rectify the problem i.e. where can I get a suitable CGI 
      script?

This will be up to your admin.  He may simply say "no CGI", except system
staff or something like that.  If that is the case, you're probably stuck.
Or you can use the old "vote with your feet" paradigm: go to another
provider, or if this is work try complaining to his boss.

   3. Is there anybody out there who is prepared to assist me in putting
      together a CGI-bin script for a fee? I live in Melbourne, Australia.

If you'll pay travel expenses.  ;-)

-spp
-- 
Stephen P Potter  Pencom Systems Administration  Mobil Global Financial Markets 
spp@psa.pencom.com	Pager: 1-800-759-8888, 187-0318     Work: 703-860-2222
     Maintainer of <A HREF="http://perl.com/perl/faq/">Perl FAQ List</A>
   "I'm supposed to be their God, and I've broken five of their commandments 
   already.  I'd've broken all six, but there aren't any sheep on board."
		-Dave Lister, 3rd technician, Red Dwarf
Technical Details
Message-ID: <SPP.96May4102937@psisa.com>
Path: arc1-ca.pugleaf.net!unknown!not-for-mail
References: <318709AF.2A95@daemon.apana.org.au>

Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: 14a068,6ef653bb52414c58
X-Google-Attributes: gid14a068,public
X-Google-Thread: fc7b2,6ef653bb52414c58
X-Google-Attributes: gidfc7b2,public
X-Google-Thread: fa0ae,6ef653bb52414c58
X-Google-Attributes: gidfa0ae,public
From: spp@psisa.com (Stephen Potter)
Subject: Re: Help!!!  My System Admin. won't accept Perl scripts.
Date: 1996/05/04
Message-ID: <SPP.96May4102937@psisa.com>
X-Deja-AN: 152974595
references: <318709AF.2A95@daemon.apana.org.au>
organization: Pencom Systems Administration -- Opinions are poster only.
newsgroups: comp.lang.perl.misc,apana.melb.general,alt.internet.services