security issue with your site

[Scream]

James i've just come across a little tad problem. Your CGI-BIN isn't protected from outside users. I just changed the link and had acess to all you CGI files. Which could be pretty bad. All i have to do is download those edit some code within the files and have access to your DB.

 

You should look into mate as that is a bit of a gapping hole for anyone that knows what they are doing could play havoc.

 

Anyway thought i would let you know

 

[ 05 July 2002, 14:36: Message edited by: Scream ]

[scouseladuk]

wudnt that have been better as a pm mate?

[Scream]

his box is full. Also i didn't give the link to get round it.

[James]

cheers mate - my PMs are now empty so should be ok again.

 

I am aware of this and will get round to it, but not too fussed as the site is backed up and there is nothing of interest to grab/corrupt - the new site will have proper security (if I ever finish it!)

 

James

[Scream]

not a problem mate. I've been brushing up on my security skills lately so if you need any help or advice just drop us a line.