CGI and DestroyStack property

Tariel Gogoberidze tariel at mac.com
Fri Apr 28 18:49:27 CDT 2006


On Thu, 27 Apr 2006 23:51:18 -0500, "J. Landman Gay" wrote:

> Just a note about saving data in stacks inside a CGI folder -- you
> usually can't do it. MC/Rev makes a backup copy of a stack before 
> saving
> it, then if the save goes okay it deletes the backup. The permissions 
> of
> a CGI folder on a server are usually set to disallow the creation of 
> new
> files, so MC can't create the backup file and the save operation fails.

Thanks Jacqueline, that was "just in time" tip and the error message 
from engine in such cases is "can't open stack backup file"

>
> You can do it if you keep the stack somewhere else outside of the CGI
> folder, but I hear that can be a security risk (though I'm not sure how
> exactly, but someone wrote me once with very strong opinions about it.)

Probably because it opens the door to what's usually called "executing 
arbitrary code on remote computer" :)

best regards
Tariel

>
> -- 
> Jacqueline Landman Gay         |     jacque at hyperactivesw.com



More information about the metacard mailing list