Re: [cgiwrap-users] Protected directories

[Joe H. <on...@dc...>]

On Thu, 25 Oct 2001 ce...@sm... wrote:

>
> Hi,
>
>   Maybe this hass been discussed eariler but I could not find anything.
>
>   I use CGIWRAP as an handler/action in apache so
> http://domain.com/script.cgi is
> automatically handled as http://domain.com/cgibin/cgiwrap/user/script.cgi.
>
>   I have directories password protected with .htaccess files and I just
> noticed that it was possible to bypass this password protection simply by
> using directly
> http://domain.com/cgibin/cgiwrap/user/passwordprotecteddir/script.cgi
>
>   I should have thought about it earlier.. Any idea on how to fix this? Can
> I place the cgiwrap executable outside of my CGIBIN?

http://cgiwrap.unixtools.org/install.html


Scroll to the bottom, for 'Password Protected Installation'

-----
Joe Hourcle