How to disable Perl for all users?

Kindly visit below mentioned URL which mights helps you to solve your issue:

DevNetwork Forums • View topic - Can we disable PERL for all users?

 

if you remove from httpd.conf that line, hackers can add in .htaccess lines for execute cgi files with diferent extention like

AddHandler cgi-script .txt

and must be carfefull with allowoverirde because this can stop of work sites what use htaccess.


i create a thread there: http://forums.cpanel.net/f5/how-can-disable-cgi-bin-131657.html

but as u can see... the reply from tech.. is not satistactory. and the security problem still


Edit by cPanel staff:

This will break cPanel. The permissions of the Perl binary file need to be left as 755 in order for cPanel to work. Changing the permissions of the Perl binary is not a valid way to secure your cPanel server.


cherss

Francisco.-

 

This will break cPanel

This will break cPanel. Most cPanel functions run as the account user, and if the Perl binary file is not executable by anybody, errors will occur in cPanel. The permissions on the Perl binary file need to be left as 755 on a cPanel server.

 

Hello,

Do you have any update about this issue.
I have tried also to disable cgi from whm for an user , but it is still working.
On httpd.conf for that site i have :
"
Options -ExecCGI -Includes
RemoveHandler cgi-script .cgi .pl .plx .ppl .perl
"
but not result.

I need also an solution that cant be overwritten by an user from htaccess.

Thank you

Stefan