Return Styles: Pseud0ch, Terminal, Valhalla, NES, Geocities, Blue Moon. Entire thread

Perl: chmod

Name: Anonymous 2007-11-04 9:45

Hello /prog/,

I made a small Perl upload script. It works well otherwise, but i can, for example upload an cgi script thru it and execute it afterwards by opening the uploaded file in browser, even when i have
"chmod 0644, $filename"
in the script.

I wouldn't want to limit any file types wich can be uploaded, so how could i just chmod every file to be readable, but *not* executable in the server? All the files are owned by apache.

tl;dr: how does i chmod?

Name: Anonymous 2007-11-04 9:47

Oh, also forgot to mention, that the file(s) get chmodded, but they still get executed.

% ls -l upd/
-rw-r--r-- 1 apache apache    95 2007-11-04 13:55 test.cgi

Name: Anonymous 2007-11-04 9:51

Options -ExecCGI

Name: Anonymous 2007-11-04 9:51

>>2
In the folder that they are uploaded to, put an .htaccess file in that disables cgi and other serverside executions.

Also, be careful of allowing people to upload html - they might include client side cookie-stealing scripts, for example.

Name: Anonymous 2013-05-10 14:53

aaaaaaaaaaaa

aaaaaaaaaaaa

aaaaaaaaaaaa

Name: Anonymous 2013-05-10 14:54

aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa

Name: Anonymous 2013-05-10 14:55

aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa aaaa

Name: Anonymous 2013-05-10 15:11

aaaa
aaaa

Name: Anonymous 2013-05-10 15:12

[spoiler]aaaa[#]

Name: Anonymous 2013-05-10 15:13

[spoiler]aaaa[#spoiler]

Name: Anonymous 2013-05-10 15:13



LELLLL
LELLLL
LELLLL
LELLLL
LELLLL



Name: Anonymous 2013-05-10 15:46

hellohellohellohellohello

Name: Anonymous 2013-05-10 15:57

hellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohello

Name: Anonymous 2013-05-10 16:03

[spoiler]> hello [o]
hello [o]
hello [o]
hello [o]
[o][o][o][o][/spoiler]

Name: Anonymous 2013-05-10 16:03

[spoiler]
hello [o]
hello [o]
hello [o]
hello [o]
[o][o][o][o][/spoiler]

Name: Anonymous 2013-05-10 16:04

[spoiler]
hello [o]
hello [o]
hello [o]
hello [o]
hello [o]
[o][o][o][o][o]
[/spoiler]

Name: Anonymous 2013-05-10 16:04

[spoiler]
hello[o]
hello[o]
hello[o]
hello[o]
hello[o]
[o][o][o][o][o]
[/spoiler]

Name: Anonymous 2013-05-10 16:05

[spoiler]
hello[o]
hello[o]
hello[o]
hello[o]
hello[o]
[o][o][o][o][o]
[/spoiler]


LELLLL
LELLLL
LELLLL
LELLLL
LELLLL

Name: Anonymous 2013-05-10 16:05


hello
hello
hello
hello
hello

Name: Anonymous 2013-05-10 16:07

hellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohello
hello
hello
hello
hello
hello
hello

hellohellohello
hello
hello
hello

hellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohello
hello
hello
hello
hello
hello

hello
hello
hello
hello
hello
hello

hello
hello
hello
hello
hello
hello
hello


hello
hello
hello

hellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohello

Name: Anonymous 2013-05-10 16:14

hellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohello
hello
hello
hello
hello
hello
hello

Name: Anonymous 2013-05-10 16:15

nigganigganigganigganigganigganigganigganigganigganigganigganigganigganigganigganigganigganigganigganigganigganigganigganigganigganigganigganigganigganigganigganigganigganigganigganigganigganigganigganigganigganigganigganigganigganigganigganigganigganigganigganigganigganigganigganigganigganigganigganigganigganigganigganigganigganigganigganigganigganigganigganigganigganigganigganigganigganigga
nigga
nigga
nigga


Newer Posts
Don't change these.
Name: Email:
Entire Thread Thread List