hmm can't execute my perl script..

[crazychicken]

http://www.bandtank.com/cgi-bin/protect/protect.pl

i can run

http://www.bandtank.com/cgi-bin/counter/counter.cgi
with no problem...

set everything, folders and files, to 777

what the heck..?

pls lmk

david

 

[N11]

If you haven't already I would recommend setting all permissions to 755 including recursively from and including your cgi-bin.

Error logs on that server are going to tell you what the issue is, everytime I've seen a 500 error it is related to permissions on the directory or the file.

 

[crazychicken]

hmm dont have any idea why 755 worked better than 777....

anyhow....

go to this page

http://www.bandtank.com

click "secret"
make up some usrw.

it goes to bandtank.com.com

wtf is that???

if you then go back and do it again, it works

can someone with a spare minute shoot me a pm or maybe get on aim that knows perl and cgi pretty well

thanks
david
bump

 

[N11]

Originally posted by: crazychicken
hmm dont have any idea why 755 worked better than 777....

Because the odds are the server your site is on is utilizing suexec which as a security precaution won't execute cgi-scripts which give read/write/execute privileges to anyone but the owner of the file.

Other setups are inherently insecure, as you shouldn't be giving write privileges to everyone.

 

[crazychicken]

what the heck...

http://www.bandtank.com/cgi-bin/pathtest.pl

run that... what is the /virtual/45/blah stuff?
i can't even go to that dir on my ssh

bump

 

[N11]

Originally posted by: crazychicken
what the heck...

http://www.bandtank.com/cgi-bin/pathtest.pl

run that... what is the /virtual/45/blah stuff?
i can't even go to that dir on my ssh

bump

Represents the file structure the server you are on is using -- for the shared environment you are in.