I. PHF Vulnerability
This PHF loophole seems to be the most classic, almost all articles will be introduced, you can execute the server commands, such as display
/ETC/PASSWD:
Lynx
cgi| Security | Security vulnerabilities CGI security vulnerability data Quick Check v1.0
Date: 2000-8-15
#############################################################################
This article is taken from a friend. This is not a precious
A routines method in CGI. PM calls 1. cgi. PM to implement two usage methods: Object-oriented method and traditional perlmodule method. Object-oriented Method :#! /Usr/local/bin/perl-W use CGI; # Load CGI routines $ q = CGI-> New; # create new CGI
Method in a cgi.pm (routines) call
1. CGI.PM implements two methods of use, namely object-oriented approach and traditional Perlmodule method.Object-oriented approach:
Copy Code code as follows:
#!/usr/local/bin/perl-w
Use CGI; #
cgi| Security | Security Vulnerabilities 51
Type: Attack type
Name: Search97.vts
Risk Rating: Medium
Description: This file will enable the intruder to read any files that the httpd user can read in your system.
Recommendation: Delete or remove
After the server flops "push" to publish faster, I have received a lot of friends letter, I hope to know more about the SERVER push technical information, to tell the truth about this new technology is not too understanding of the author, but in
Basic ideas:
Write a separate program for each function, program page
Get as few customers as possible about your server-side information
Do not use the "customer should write" The idea of thinking about the problem
Thinking as much as possible
Since The original tech preview release of FastCGI last year, we ' ve been seeing a lot of requests for getting Ruby on Rail s running with our FastCGI. Theoretically, since the FastCGI component uses a standard protocol to support fastcgi-enabled
;;;;;;;;;;;;;;;;;;;; Resource restrictions;;;;;;;;;;;;;;;;;;;;; Maximum number of seconds for each script to be executedMax_execution_time = 30; The maximum time for each script to analyze the request dataMax_input_time = 60; Maximum input variable
In Linux, implement ServerPush-Linux Enterprise Application-Linux server application information. The following is a detailed description. Due to the openness of Linux, the creativity of programmers is greatly stimulated, and new technologies that
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.