in reply to Re: perl and forums
in thread perl and forums

Curiously googling for mwForum turned up this. I did search for YaBB on perlmonks but the search was hanging and I was too impatient.

Okay. The admins say I can install whatever I want so long as I do it manually. I have downloaded it and I am playing with it on a linux notebook. However even just reading through the install instructions I am seeing some security issues. The cron util scripts, the .pm files and the cgi scripts are all lumped together in one directory. The developers are obviously assuming that all users will have their cgi-bin directory nicely outside of the html directory. I think I can get round this by installing these files outside of the html area and setting up a dummy mwf area where scripts I explicitly designate exec the scripts outside the dummy area. Still I better get a login on the mwf site and raise my concerns.