Perl: chmod
1
Name:
Anonymous
2007-11-04 9:45
Hello /prog/,
I made a small Perl upload script. It works well otherwise, but i can, for example upload an cgi script thru it and execute it afterwards by opening the uploaded file in browser, even when i have
"chmod 0644, $filename"
in the script.
I wouldn't want to limit any file types wich can be uploaded, so how could i just chmod every file to be readable, but *not* executable in the server? All the files are owned by apache.
tl;dr: how does i chmod?
2
Name:
Anonymous
2007-11-04 9:47
Oh, also forgot to mention, that the file(s) get chmodded, but they still get executed.
% ls -l upd/
-rw-r--r-- 1 apache apache 95 2007-11-04 13:55 test.cgi
3
Name:
Anonymous
2007-11-04 9:51
Options -ExecCGI
4
Name:
Anonymous
2007-11-04 9:51
>>2
In the folder that they are uploaded to, put an .htaccess file in that disables cgi and other serverside executions.
Also, be careful of allowing people to upload html - they might include client side cookie-stealing scripts, for example.
6
Name:
Anonymous
2013-05-10 14:53
aaaa aaaa aaaa
aaaa aaaa aaaa
aaaa aaaa aaaa
7
Name:
Anonymous
2013-05-10 14:54
aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa
8
Name:
Anonymous
2013-05-10 14:55
aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa
9
Name:
Anonymous
2013-05-10 15:11
aaaa
aaaa
10
Name:
Anonymous
2013-05-10 15:12
[spoiler] aaaa[#]
11
Name:
Anonymous
2013-05-10 15:13
[spoiler] aaaa[#spoiler]
12
Name:
Anonymous
2013-05-10 15:13
LELLLL
LELLLL
LELLLL
LELLLL
LELLLL
13
Name:
Anonymous
2013-05-10 15:46
hellohellohellohellohello
14
Name:
Anonymous
2013-05-10 15:57
hellohello hello hello hellohello hellohello hello hello hello hello hello hellohello hello hello hellohello hello hello hellohellohellohellohellohellohellohellohellohellohellohellohello hello hello hellohellohellohello hellohellohellohellohellohellohellohellohello hellohellohellohellohellohellohellohellohellohello hellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohello hellohellohellohellohellohellohellohellohellohellohellohellohellohello hello hellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohello hellohellohellohello hello hello hello hello hello hello hellohello hello hellohello hello hellohello hellohello hello hellohellohello hello hellohello hello hello hello hello hello hello hellohello hello hello hello hello hello hello hello hello hello hello hello hello hello hello hello hello hellohello hello hello hello hello hello hello hello hello hellohello hello hello hello hello hello hello hello hello hello hello hello hellohello hello hello hello hello hellohello hello hello hello hello hello hello hello hello hello hello hello hello hellohellohello hello hello hello hello hello hello hello hello hello hello hellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohello hello hello hellohello hello hello hello hello hello hello hellohello hello hello hello hello hello hellohello hello hello hellohello
15
Name:
Anonymous
2013-05-10 16:03
[spoiler] > hello [o]
hello [o]
hello [o]
hello [o]
[o] [o] [o] [o] [/spoiler]
16
Name:
Anonymous
2013-05-10 16:03
[spoiler]
hello [o]
hello [o]
hello [o]
hello [o]
[o] [o] [o] [o] [/spoiler]
17
Name:
Anonymous
2013-05-10 16:04
[spoiler]
hello [o]
hello [o]
hello [o]
hello [o]
hello [o]
[o] [o] [o] [o] [o]
[/spoiler]
18
Name:
Anonymous
2013-05-10 16:04
[spoiler]
hello[o]
hello[o]
hello[o]
hello[o]
hello[o]
[o] [o] [o] [o] [o]
[/spoiler]
19
Name:
Anonymous
2013-05-10 16:05
[spoiler]
hello[o]
hello[o]
hello[o]
hello[o]
hello[o]
[o] [o] [o] [o] [o]
[/spoiler]
LELLLL
LELLLL
LELLLL
LELLLL
LELLLL
20
Name:
Anonymous
2013-05-10 16:05
hello
hello
hello
hello
hello
21
Name:
Anonymous
2013-05-10 16:07
hello hellohellohello hello hello hellohello hello hello hello hello hello hello hello hello hello hello hello hello hello hello hello
hello
hello
hello
hello
hello
hello
hello hello hello
hello
hello
hello
hellohellohellohellohellohellohellohellohellohellohello hello hello hello hello hello hellohello hello hello hello hello hello hello hello hello hello hello hellohello hello hellohello
hello
hello
hello
hello
hello
hello
hello
hello
hello
hello
hello
hello
hello
hello
hello
hello
hello
hello
hello
hello
hello
hello hellohello hello hello hello hello hello hello hello hello hello hello hello hello hello hello hellohello hello hello hello hello hello hello hello hello hello hello hello hello hello hello hello hello hello hello hello hello hello hello hello hello hello hello hello hello hello hello hello hello hello hello hello hello hellohello hello hello hello hello hello hello hello
22
Name:
Anonymous
2013-05-10 16:14
hello hello hello hello hello hello hello hello hello hello hello hello hello hello hello hello hello hello hello hello hello hello hello hello hello hello hello hello hello hellohello hellohello hellohellohello hellohello hello hello hello hello hello hello hello hello hello hello hello hello hello hello hellohello hello hello hellohello hello hello hello hello hello hello hello hellohellohellohello hello hello hello hello hellohello hello hello hello hellohello hello hello hello hello hellohello hello hello hello hello hello hello hello hello hello hello hello hello hello hello hello hello hello hello hello hello hello hello hello hello hello hellohellohellohellohellohellohellohellohellohellohello hello hello hellohello hello hello hello hello hellohello hello hello hello hello hello hellohello hellohello hello hello hello hello hello hello hello hello hello hellohello hello hello hello hello hello hellohello hello hello hello hello hello hello hello hellohello hello hello hello hello hello hello hello hello hello hello hello hello hello hello hello hello hello hello hello hello hello hello hello hello hello hellohellohellohello hellohellohellohellohellohellohellohellohellohellohello
hello
hello
hello
hello
hello
hello
23
Name:
Anonymous
2013-05-10 16:15
nigganigganigganigganigganigganigganigganigga nigganigganigga nigga nigga nigga nigga nigga nigga nigga nigganigga nigga nigga nigga nigganigga nigga nigga nigga nigga nigga nigga nigga nigganigganigganigganigganigganigganigganigganigga nigga nigganigganigganigganigganigganigganigganigganigganigga nigga nigga nigga nigga nigga nigga nigga nigganigga nigga nigga nigga nigga nigga nigga nigga nigga nigga nigga nigga nigganigganigga nigga
nigga
nigga
nigga