[cgiwrap-users] Protected directories

[<ce...@sm...>]

Hi,

  Maybe this hass been discussed eariler but I could not find anything.

  I use CGIWRAP as an handler/action in apache so
http://domain.com/script.cgi is
automatically handled as http://domain.com/cgibin/cgiwrap/user/script.cgi.

  I have directories password protected with .htaccess files and I just
noticed that it was possible to bypass this password protection simply by
using directly
http://domain.com/cgibin/cgiwrap/user/passwordprotecteddir/script.cgi

  I should have thought about it earlier.. Any idea on how to fix this? Can
I place the cgiwrap executable outside of my CGIBIN?


Thank you,

Cedric