in reply to CGI script creating a user shell environment

Some random thoughts.

  1. Does the cgi run in tainted mode? If so, have you untainted $ENV{PATH} and the command's arguments?
  2. Are you sure the program does not run? Maybe you just don't get its output.
  3. If you put an error in the cgi, does it get reported to you? Don't you just get an error but dont see it from the browser?
  • Comment on Re: CGI script creating a user shell environment

In Section Seekers of Perl Wisdom