Stopping Perl

Hi Folks,

I host on a shared server where CGI/Perl scripts are enabled. I am only
using PHP and as such want to stop any rogue perl scripts on the same
server being able to browse my files. Is there any way to do this
without hosting on a dedicated server? PHP has some features which can
be turned off, but I'm not sure if it can be done with perl.

I host with Cpanel is that helps.

Any help would be appreciated, as it could get expensive if not.

Thanks

A

Re: Stopping Perl

UKuser wrote:
> Hi Folks,
>
> I host on a shared server where CGI/Perl scripts are enabled. I am only
> using PHP and as such want to stop any rogue perl scripts on the same
> server being able to browse my files. Is there any way to do this
> without hosting on a dedicated server? PHP has some features which can
> be turned off, but I'm not sure if it can be done with perl.
>
> I host with Cpanel is that helps.
>
> Any help would be appreciated, as it could get expensive if not.
>
> Thanks
>
> A
>
So if you turn off CGI/Perl scripts with Cpanel, it turns off for
whoever you share with and they need CGI/Perl?

I don't see how you can do it for part of the box.

Re: Stopping Perl

UKuser wrote:

> I host on a shared server where CGI/Perl scripts are enabled. I am only
> using PHP and as such want to stop any rogue perl scripts on the same
> server being able to browse my files. Is there any way to do this
> without hosting on a dedicated server? PHP has some features which can
> be turned off, but I'm not sure if it can be done with perl.

I'm not 100% sure, but I belive this would do the trick:

* Configure the server to run CGI scripts with suexec (so they run as the
owner and not as the webserver)

(You'd probably have to set the sysadmin to do this)

* Configure the permissions on your directories to allow access to you and
to the server, but not other users.

--
David Dorward
Home is where the ~/.bashrc is

Re: Stopping Perl

UKuser wrote:
> I host on a shared server where CGI/Perl scripts are enabled. I am only
> using PHP and as such want to stop any rogue perl scripts on the same
> server being able to browse my files.

But anybody is welcome to use PHP (or Python or ...) to read your files,
is that what you're saying? ;-)

You'd better ask your web host about the server security in this respect.

--
Gunnar Hjalmarsson
Email: http://www.gunnar.cc/cgi-bin/contact.pl