Kbase P112966: Why use the wspd_cgi.sh script with WebSpeed?
| Autor |
Progress Software Corporation - Progress |
| Acesso |
Público |
| Publicação |
27/01/2006 |
|
Status: Unverified
GOAL:
Why use the wspd_cgi.sh script with WebSpeed?
GOAL:
Why do not use cgiip executable versus wspd_cgi.sh?
GOAL:
What is the function of the wspd_cgi.sh script?
FACT(s) (Environment):
Apache
FIX:
Using the wspd_cgi.sh script is a techniques to minimize unauthorized access to WebSpeed messengers. You can use the sample file wspd_cgi.sh to set up a file association for running the CGIIP Messenger under Apache Webserver. It's located in the Progress DLC\bin directory.
Replacing the default filenames and file extensions associated with key WebSpeed files with proprietary (that is, less easily recognizable) names and extensions will limit unauthorized personnel's ability to recognize these files when they display on the URL.
Also, remember that if you use the cgiip executable directly in the URL, it would be possible to pass cgi parameters directly to the executable.
For this reasons:
- Consider Renaming the default WebSpeed Messenger cgiip
- Also consider changing the default script name wspd_cgi.sh itself, to a less immediately identifiable name to hide the WebSpeed messenger and WebSpeed Broker names that the wspd_cgi.sh file contains.