Re^7: Using relative paths with taint mode

Why is that so?
Because that's where it gets put on my shared hosting...

Well, yeah, that explains a lot. In that case you might be stuck with .htaccess and all its shortcomings. Or maybe not, since your environment setup somewhat resembles virtual hosts, each of which can have its own config. But again, that's a question of "secure virtual host configuration" and not of "taint mode".

Comment on Re^7: Using relative paths with taint mode

Replies are listed 'Best First'.
Re^8: Using relative paths with taint mode by Bod (Parson) on Jun 25, 2021 at 17:26 UTC
Based on all the wisdom, advice and direction monks have kindly supplied in this thread, I've changed the setup of a newly created site... `/home/myusername/website/prod/www <- webroot /home/myusername/website/prod/lib <- scripts /home/myusername/website/prod/template <- you can guess :) /home/myusername/website/test/ ...` [download] With a bit of experimentation I've found that scripts will run in the webroot. So, a config tweak and the default file provided in `www` is no longer `index.html`. Instead it is a Perl script that calls a couple of modules hidden away in `lib` which is where all the work gets done. I have not got very far yet with (re)building this site but already the arrangement feels better. More importantly it feels more secure which is rather important here. Thank you to everyone who contributed here.	[reply] [d/l] [select]

Replies are listed 'Best First'.

Re^8: Using relative paths with taint mode
by Bod (Parson) on Jun 25, 2021 at 17:26 UTC

Based on all the wisdom, advice and direction monks have kindly supplied in this thread, I've changed the setup of a newly created site...

/home/myusername/website/prod/www        <- webroot
/home/myusername/website/prod/lib        <- scripts
/home/myusername/website/prod/template   <- you can guess :)
/home/myusername/website/test/ ...
[download]

With a bit of experimentation I've found that scripts will run in the webroot. So, a config tweak and the default file provided in www is no longer index.html. Instead it is a Perl script that calls a couple of modules hidden away in lib which is where all the work gets done. I have not got very far yet with (re)building this site but already the arrangement feels better. More importantly it feels more secure which is rather important here.

Thank you to everyone who contributed here.

[reply]
[d/l]
[select]