Beefy Boxes and Bandwidth Generously Provided by pair Networks
Problems? Is your data what you think it is?

Re^4: running an executable from a cgi script

by swkronenfeld (Hermit)
on Feb 09, 2006 at 16:58 UTC ( #529143=note: print w/replies, xml ) Need Help??

in reply to Re^3: running an executable from a cgi script
in thread running an executable from a cgi script

So you are allowing a user to upload a text file and your executable is doing some sort of processing on that file. Then yes, you have a potential security problem.

If you're greping the text file for some keywords and printing them back...not such a big deal. If you're letting the user upload a shell script and executing it for alert! So we need to know what your executable is doing with the text.

Replies are listed 'Best First'.
Re^5: running an executable from a cgi script
by Angharad (Pilgrim) on Feb 09, 2006 at 17:05 UTC
    ok. thanks for your help so far. The executable is simply taking the file and extracting some information from it and then its doing some calculations with the information it has been given.
    So .. the upload script first allows the user to upload the file (the user can only upload a text file and only up to a certain size .. that has already been taken care of). Then the upload script sends the name and location of the file to the second script which then runs the external program

Log In?

What's my password?
Create A New User
Domain Nodelet?
Node Status?
node history
Node Type: note [id://529143]
and the web crawler heard nothing...

How do I use this? | Other CB clients
Other Users?
Others exploiting the Monastery: (8)
As of 2022-11-30 13:31 GMT
Find Nodes?
    Voting Booth?