On Tue, 12 Jan 2010, Kim Holviala wrote:<br><br>> Almost worked with kgopherd.... I wasn't giving the arguments in argv[] but<br>> in $QUERY_STRING like in CGI's. And I'm not sure if I'm comfortable with <br>
> calling binaries using arguments gotten from the internets...<br>> <br>> Need to think about it before I implement argv[] support.<br> <br>Kim,<br>Thanks for giving it a try. I understand the security concerns which is <br>
why germ voids it's $ENV{PATH} variable and doesn't allow user or group id<br>to be changed, and doesn't call any external programs, etc. But of <br>course, not every script will take the proper precautions (and I may not <br>
have even taken _all_ the precautions I should have, just the ones I knew<br>to take.)<br><br>Bucktooth allows arguments to be passed straight to the script, so I<br>used that because it was simple. However, it also passes executables an<br>
environmental variable "SELECTOR" which, with a little more parsing,<br>could be used the same as argv[]. If you pass me along some references <br>for how kgopherd handles CGI, I can try to make germ more friendly to your<br>
server. If kgopherd is roughly CGI compliant, I could just refer to that<br>standard, I suppose.<br><br>My goal is to make germ as server independent as possible.<br><br>Thanks,<br>Wesley<br><br>