> Have you ever tested CGI mode under PWS or IIS ?

Yes, I have customers that uses Embperl as CGI under IIS which works for
quite a while without problems, but, as I said before, I never have tried
perlis.dll.

The CGI installations that I mentioned above, have a mapping of .epl to
embpcgi.pl, which I suggested for the second step, so every epl file will be
executed by embpcgi.pl, which in turn is executed by Perl. For your
description you mention below, this should also work with your setup,
because in this case the .epl file is the script and PATH_TRANSLATED will
point to that script.

At our customer both methods have worked in cgi mode, that's the reason why
I suggested to take two steps for the setup, but it seems we need this
mapping of .epl to embpcgi.pl

Gerald


----- Original Message -----
From: "Lukas Zapletal" <[EMAIL PROTECTED]>
To: "Gerald Richter" <[EMAIL PROTECTED]>
Sent: Thursday, April 19, 2001 9:20 AM
Subject: Re: PERL AND IIS


> I read several docs at msdn. PWS 4.0 always (either in isapi or ngi mode)
> looks for a SUBDIRECTORY, not the script.
>
> MSDN doc:
> SYMPTOMS
> CGI applications often use the HTTP variables PATH_INFO and
PATH_TRANSLATED.
> However, these may appear to work incorrectly in Internet Information
Server
> (IIS) version 4.0. These CGI environment variables return the physical
path
> to the file that was passed to the CGI application as part of the GET
> statement. Instead, IIS returns the path to the CGI script.
>
>
>
> CAUSE
> This is by design, for security purposes. PATH_INFO and PATH_TRANSLATED
can
> be used to get information about the physical makeup of the Web server and
> thus be used to mount an attack against the server.
>
>
>
> WORKAROUND
> If you want to use PATH_INFO and PATH_TRANSLATED as specified by the CGI
> specification, then use the AllowPathInfoForScriptMappings property. This
> property can be set using the Adsutil.vbs tool or the MetaEdit.exe tool,
> which comes with the Internet Information Server 4.0 Resource Kit. Using
> this property, you can set a Web server to allow or disallow the use of
the
> variables.
>
>
>
> MORE INFORMATION
> For more information, refer to AllowPathInfoForScriptMappings in the
online
> documentation.
>
> Have you ever tested CGI mode under PWS or IIS ?
>
>
>
>


---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to