is there any how to link to show how to secure the cgi, to not be possible to exploit with it?
is there any how to link to show how to secure the cgi, to not be possible to exploit with it?
Not sure I understand, you want to be able to configure your server so that CGI scripts cannot be used to exploit flaws in the server configuration?
If so, you can't, simple as that. You should, however, always enabled suexec so that CGI scripts run under the process of the user - this can help slow things down sometimes, but other than that, the best way is to ensure that:
1. You keep your OS and applications up to date
2. You subscribe to security mailing lists for yur OS
3. You keep cPanel up to date
There is one more thing to help you in a script:
/scripts/enablefileprotect
Which makes it a little more difficult for users to access other users files on the server - by no means impossible, but again, it slows them down a bit.
Jonathan Michaelson
Need your cPanel servers secured and tuned?
cPanel Server Configuration, Security, Recovery and Antivirus/AntiSpam Services
Developers of the most effective (and free) Firewall & Security Solution for cPanel Servers - csf
http://www.configserver.com
thanks![]()