cgi

My problem is the following. After the password is recognized as valid I need to redirect to main.cgi but I am getting the message as: Status: 302 Found Location: http://localhost/cgi-bin/Main.cgi I know the reason for this is that I am writing this statement after Content-Type so it is taking this as HTML and printing it on screen. I am a newbie to Perl. Can anybody please help me find the solution for this and make my code work the way I want it to? Or please suggest me some alternative code for this, or any link which might help me out. #!C:\perl\bin\perl.exe use strict; use CGI qw(

I have a situation where I am opening a file based on the $_SERVER['REMOTE_USER'] variable. I don't think this is spoof-able but would just like to confirm. I do not want to make myself vulnerable to the reading of arbitrary files: <? $user = $_SERVER['REMOTE_USER']; $fp = fopen("./$user.png","r"); ?> Yes, that username is whatever is specified by the remote user. You need to verify password as well. If password is verified by your server, and not your application, then you are probably okay. 来源： https://stackoverflow.com/questions/12942065/can-serverremote-user-be-spoofed

I'm trying to make an exercise from Udacity's Full Stack Foundations course. I have the do_POST method inside my subclass from BaseHTTPRequestHandler , basically I want to get a post value named message submitted with a multipart form, this is the code for the method: def do_POST(self): try: if self.path.endswith("/Hello"): self.send_response(200) self.send_header('Content-type', 'text/html') self.end_headers ctype, pdict = cgi.parse_header(self.headers['content-type']) if ctype == 'multipart/form-data': fields = cgi.parse_multipart(self.rfile, pdict) messagecontent = fields.get('message')

I am running the following command from my home directory: python -m CGIHTTPServer This runs the server, but when I try to access a script in the cgi-bin directory I get: Traceback (most recent call last): File "/usr/lib/python2.7/CGIHTTPServer.py", line 251, in run_cgi os.execve(scriptfile, args, env) OSError: [Errno 13] Permission denied Running as root does not make a difference. The files seem to have all the right permissions: student@bandersnatch:~$ ls -lhR .: total 12K drwxr-xr-x 2 student student 4.0K Jun 13 18:38 cgi-bin drwxr--r-- 2 student student 4.0K Jun 10 2004 kalpy -rwxrwxrwx 1