Re: help with web security

2000-06-07 Thread Alvin Oga
hi shao from the autoated cgi scripts... you can easily add new users to .htpasswd files to allow them to access web stuff... allowing users to add themself to your "main system" and update dns, qmail and other stuff is giving the hacker (indirectly) complete control of your machine... - dont d

help with web security

2000-06-07 Thread Shao Zhang
Hi, I am setting up an automated registration system where the cgi scripts need to do the following: 1. add a new user to the system and write to passwd files 2. update dns, restart named 3. update httpd.conf, restart httpd 4. update qmail conf, rest