Re: [cgiwrap-users] incorrect username extracted from PATHINFO
Brought to you by:
nneul
From: Joe H. <on...@dc...> - 2001-11-29 17:52:02
|
On Wed, 28 Nov 2001, Andrew Vernon wrote: > I host a number of virtual domains that use cgiwrap, each owned by a > different user. > > In many cases, cgiwrap incorrectly guesses the username the script > should run under. > > To keep them out of the rest of my system, I disallow shell and chroot > their FTP session into their home directories. > > Each virtual domain is defined like this: > > NameVirtualHost 208.15.218.26 > <VirtualHost 208.15.218.26> > ServerAdmin web...@mc... > DocumentRoot /home/ataylor/public_html > ServerName www.mcfumbler.com > AddHandler cgi-wrapper .cgi > Action cgi-wrapper /cgiwrap/cgiwrap/ataylor > <Directory /home/ataylor/public_html> > Options Indexes Includes ExecCGI > </Directory> > <Directory /home/ataylor/public_html/havers/dross> > Options Indexes Includes ExecCGI > </Directory> > CustomLog /var/log/httpd/mcfumbler.com-access_log combined > </VirtualHost> > > This should allow the domain owner (ataylor in this case) to run > scripts through the wrapper anywhere in their web space. > > However, this fails for http://www.mcfumbler.com/havers/dross/gm.cgi > > It's as though Apache or cgiwrap ignores the "ataylor" part of the action > directive. The 'cgiwrapd' option is your friend. Set up a virtual host calling cgiwrapd instead of cgiwrap, and check what it's passing in. ----- Joe Hourcle |