TR Forums

Hi folks,

I seem to remember seeing some reasons as to why it's a bad idea to put your cgi-bin directory inside your public_html directory, but can't find any references. Can anyone point me in the right direction? I think I'm aware of the reasons, but need an authorative answer (with references, if possible) for a strong-headed colleague who doesn't always listen.

Thanks,
Bruce

No takers on this one?

A few minutes on google got this.

http://www.google.com/search?q=cache:C9 ... rity&hl=en

It describes the way the pathing is set for the cgi bin, which is still in public but set as /web/cgi-bin.

Another possible reason for not putting it into public would force you to use a cgiwrapper on it, info on that can be found at :

http://www.genome.wi.mit.edu/WWW/faqs/w ... y-faq.html