|
Home > Archive > Apache Server configuration support > October 2006 > Using other names for cgi-bin directory
You are viewing an archived Text-only version of the thread.
To view this thread in it's original format and/or if you want to reply to
this thread please [click here]
| Author |
Using other names for cgi-bin directory
|
|
| kidalex@gmail.com 2006-10-31, 1:33 am |
| I don't want the "/cgi-bin/" string in my URL. So, I'm trying to use a
different name for that directory. I'm trying to accomplish this by
putting this line into the httpd.conf file:
ScriptAlias /manager/ "/var/www/secure-bin/"
NOTE: "secure-bin" and not "cgi-bin" is because I'm using SSL.
Does this in any way compromise the security of my scripts?
Thank you so much for your help.
Alex
| |
|
| <kidalex@gmail.com> schreef in bericht
news:1162270621.047249.246730@e64g2000cwd.googlegroups.com...
>I don't want the "/cgi-bin/" string in my URL. So, I'm trying to use a
> different name for that directory. I'm trying to accomplish this by
> putting this line into the httpd.conf file:
>
> ScriptAlias /manager/ "/var/www/secure-bin/"
The name should match its usage.
I assume these scripts are off-limits for the larger public.
>NOTE: "secure-bin" and not "cgi-bin" is because I'm using SSL.
Unless the scripts tests for https the name does not match the content and
I'ld stem for "/var/www/manager/"
> Does this in any way compromise the security of my scripts?
No, it adds security-by-obscurity to it :o)
Lacking a /cgi-bin will most probing attempts for e.g open mail scripts.
On the other hand /manager is not an uncommon name too.
HansH
|
|
|
|
|