Re: Security question

2000-11-26 Thread Neil Gunton
Angus Lees wrote: > > On Sun, Nov 26, 2000 at 03:31:52PM -0500, Neil Gunton wrote: > > > > Perhaps a directive which allows certain file extensions to be processed > > by EmbperlObject::Execute(*), but not parsed and interpreted internally. > > > > option 1: > > use the "Safe" module and allow

Re: Security question

2000-11-26 Thread Angus Lees
On Sun, Nov 26, 2000 at 03:31:52PM -0500, Neil Gunton wrote: > > Perhaps a directive which allows certain file extensions to be processed > by EmbperlObject::Execute(*), but not parsed and interpreted internally. > option 1: use the "Safe" module and allow user's web pages to include code, but

Re: Security question

2000-11-26 Thread Neil Gunton
> Perhaps a directive which allows certain file extensions to be processed > by EmbperlObject::Execute(*), but not parsed and interpreted internally. Further to my earlier email, it occurs to me that I am being too restrictive here. In fact, ANY file which is included by base.html (or whatever EM

Re: Security question

2000-11-26 Thread Neil Gunton
[EMAIL PROTECTED] wrote: > > why don't you place your embedded perl that you need in a directory where > the users on your website can not write and alias those scripts to appear > as if they were in the webtree .. eg inside your apache conf somewhere you > would have .. > > AliasMatch ^/(.*\.e