Fixing Cgi-bin To For Cgi Files Only

[rowanp]

Hi

 

How do I fix the server to only allow cgi files to be run from the cgi-bin directory?

 

Thanks

 

rowanp.

[TCH-Bruce]

Here or on your own server?

[rowanp]

Here at TCH.

[TCH-Bruce]

I'm curious as to why you would want this? You would not be able to have an MT installation outside of the cgi-bin folder if this were the case.

 

It is an apache configuration setting I believe so you would not have access to change it. Only the support staff would. Unless there was an .htaccess setting you could change.

[rowanp]

I am installing a pre-built, and customized, cgi script on my site. I am worried about the potential security issues that this may bring, and thought that limiting cgis to the cgi-bin may help in some way. Any other suggestions as how to make a script more secure would be welcome.