All geek questions in one place

How secure are CGI-based web applications?

A significant disadvantage of using CGI is the poor performance of the web server. But how safe are CGI-based applications (mainly C / C ++)? Are there any serious holes in the CGI architecture built in C / C ++?

I would like to know some realities of CGI-based web application / website implementations. I know this is javaranch.com.

+3
source share
4 answers

The main security core that I have seen anywhere, including C / C ++, will not use the standard open CGI library without reading its documentation, and I think that you are protected anyway.

  • . CGI. (, PHP), (Perl ), , (C/++). , , , . Do . , , , .
  • . , , .
  • , . , , CGI- Perl .. , , - . - , , . .

. - , , , . , , , 15 . SELinux .

, , ? ? , C/++, Perl. , Perl, ++. .

+5

CGI , WSAPI. , . CGI , .

+2

CGI. PHP-, , CGI - mod_php - suid.

In general, CGI has lower performance, but it is better for security - you do not have access to internal web servers (as well as to mod_perl and mod_php), so using vulnerabilities is more difficult. If you use cgi-bin, you do not execute files that are not displayed (a common mistake of PHP programmers is that they have libraries with the extension of the type .inc, so the source is displayed when this file is requested directly).

0
source

Perl authentication mode provides a wonderful way to increase security.

0
source

Source: https://habr.com/ru/post/1698374/

More articles:


All Articles