Re: FN-FORUM: perl problem

date posted 1st May 2003 18:38

Quoting PAMELA WHITTAKER [EMAIL REMOVED]

> There is a cgi-bin in the live site that I am trying to get to work and I
> put a copy of FormMail.pl in there but when I try and call it I get:-
>
> Forbidden
> You don't have permission to access /secure/ramson/cgi-bin/FormMail.pl on
> this server.
>
> the user and world for the cgi bin had read write and execute access and the
> Group has read and execute acccess.
> the user for the FirmMail had read write and execute access and the Group
> and world has read and execute acccess
>
> any ideas please. It is on a unix box by the way.

Looks like the script probably has sufficient permissions to be executable.

Generally doesn't make any difference if you uploaded in binary mode, as
perl seems fairly relaxed about that and I'd expect a different error
anyway.

Do you have access to the error logs for the server? That might give some
useful information?

Is the cgi-bin enabled in the webserver (Apache, I assume) to allow access
to this directory? (Are there any other scripts there already that you
can execute?)

Alternatively, I just banned GET requests to FormMail on one of the servers
I look after to help cut down on abuse of old insecure versions, so I guess
other people might be doing that too. Try using POST for form submission,
if you aren't already? Or calling the script a completely different name,
in case all FormMail requests are banned.

James