Security of launching Perl
| From: | James Lyon | Date: | Thu, 25 May 2000 12:14:58 +0000 |
| Subject: | Security of launching Perl | ||
| Groups: | php.general | ||
| Request: | Send a blank email to php-general+get-532@lists.php.net to get a copy of this message | ||
I have a 3rd-party cgi script that's written in Perl and I have to use
it.
My entire site is in PHP3 (Linux / MySQL).
I figure I can use system() or passthru() to launch a command like
"/usr/bin/perl thescript.cgi" to achieve the required result.
BUT ... is this secure? Forking off processes from a script launched
from the web server? I know enough to know that I don't know enough
about Linux security to be able to answer this question with absolute
authority!
Thanks,
James.