The eAuction Support Forums

The eAuction Support Forums
https://www.everyscript.de/cgi-bin/yabb/YaBB.pl
eAuction 1.6.1.x >> Start Up and more >> Cgi-bin in public dir?
https://www.everyscript.de/cgi-bin/yabb/YaBB.pl?num=1161392279

Message started by Fizzgig on 10/21/06 at 02:57:59

Title: Cgi-bin in public dir?
Post by Fizzgig on 10/21/06 at 02:57:59

I'm curious about my cgi-bin dir. being in my public_html directory...is this ok? I don't know how to move it out or anything, if it's not a good thing can someone show me a link or something to learn how to move it or at least secure it better (for instance, I imagine anyone who knows eAuction would be able to access the (small) admin page easily and delete auctions?)
I'm worried about it being accessible to hackers. I use to use phpauction and it was constantly being hacked :-/

By the way, I have full access to my web server, can create accounts and do whatever in there...

Thanks.
-Fizz

Title: Re: Cgi-bin in public dir?
Post by Fizzgig on 10/21/06 at 04:35:54

Well, I was told at first by my husband that it would be insecure being in /public_html/ but after researching a bit I'm finding it's actually supposed to be in there...*sigh* I don't know.

It seems so insecure to me so if anyone has any tips on keeping it secure please let me know.
I may just be paranoid since my last auction was hacked so many times...

-Fizz

Title: Re: Cgi-bin in public dir?
Post by mars on 10/21/06 at 11:34:00

that is where it normally is located, at least on non-Windows servers.

Title: Re: Cgi-bin in public dir?
Post by Dieter Werner on 10/21/06 at 16:07:04

mars wrote:

that is where it normally is located, at least on non-Windows servers.

Yes mars - you are right ...
but a really good (and secure) server configuration would never put the cgi-bin directory into the public accessible directory.