diff Doc/lib/libcgi.tex @ 30842:fe9a5a2dd2c1 2.3

Avoid giving advice that's bad for security, as per SF bug #823515
author Alex Martelli <aleaxit@gmail.com>
date Sun, 02 Nov 2003 16:31:22 +0000
parents 523c3d61dbdd
children a15115290e13
line wrap: on
line diff
--- a/Doc/lib/libcgi.tex	Sun Nov 02 16:11:48 2003 +0000
+++ b/Doc/lib/libcgi.tex	Sun Nov 02 16:31:22 2003 +0000
@@ -598,7 +598,9 @@
 usually not set to a very useful value in a CGI script.
 
 \item When reading or writing external files, make sure they can be read
-or written by every user on the system.
+or written by the userid under which your CGI script will be running:
+this is typically the userid under which the web server is running, or some
+explicitly specified userid for a web server's \samp{suexec} feature.
 
 \item Don't try to give a CGI script a set-uid mode.  This doesn't work on
 most systems, and is a security liability as well.