Path: csiph.com!v102.xanadu-bbs.net!xanadu-bbs.net!feeder.erje.net!eu.feeder.erje.net!newsfeed.freenet.ag!news2.euro.net!newsgate.cistron.nl!newsgate.news.xs4all.nl!post.news.xs4all.nl!not-for-mail Return-Path: X-Original-To: python-list@python.org Delivered-To: python-list@mail.python.org X-Spam-Status: OK 0.022 X-Spam-Evidence: '*H*': 0.96; '*S*': 0.00; 'scripts': 0.03; '(at': 0.04; 'received:80.91': 0.09; 'received:80.91.229': 0.09; 'received:gmane.org': 0.09; 'received:list': 0.09; 'runs': 0.10; 'message-id:@4ax.com': 0.16; 'received:80.91.229.3': 0.16; 'received:plane.gmane.org': 0.16; 'scripts.': 0.16; 'sat,': 0.16; 'directory.': 0.24; 'url:home': 0.24; 'server.': 0.24; 'header:X -Complaints-To:1': 0.27; 'cgi': 0.31; 'restricted': 0.31; 'stuff': 0.32; 'run': 0.32; 'running': 0.33; 'subject:from': 0.34; 'no,': 0.35; 'charset:us-ascii': 0.36; 'system,': 0.38; 'server': 0.38; 'to:addr:python-list': 0.38; 'files': 0.38; 'to:addr:python.org': 0.39; 'received:org': 0.40; 'even': 0.60; 'most': 0.60; 'full': 0.61; 'kind': 0.63; 'more': 0.64; 'user,': 0.69; 'jul': 0.74; 'subject:Location': 0.84; 'received:108': 0.93; '2013': 0.98 X-Injected-Via-Gmane: http://gmane.org/ To: python-list@python.org From: Dennis Lee Bieber Subject: Re: Geo Location extracted from visitors ip address Date: Fri, 05 Jul 2013 22:52:03 -0400 Organization: IISS Elusive Unicorn References: Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit X-Gmane-NNTP-Posting-Host: adsl-108-79-218-115.dsl.klmzmi.sbcglobal.net X-Newsreader: Forte Agent 6.00/32.1186 X-No-Archive: YES X-BeenThere: python-list@python.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: General discussion list for the Python programming language List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Newsgroups: comp.lang.python Message-ID: Lines: 19 NNTP-Posting-Host: 2001:888:2000:d::a6 X-Trace: 1373079132 news.xs4all.nl 15877 [2001:888:2000:d::a6]:34399 X-Complaints-To: abuse@xs4all.nl Xref: csiph.com comp.lang.python:50039 On Sat, 06 Jul 2013 04:10:24 +0300, ????? Gr33k declaimed the following: > >But he cgi scripts when running have full access to the server. >No? or they only have the kind of access that their user has also? > In any decent system, the web server runs as a particular user, and only has access to the web content and scripts. And those scripts run as the web server process (at most -- it may be that they run at an even more restricted mode). So NO, they do NOT have access to stuff under /root; for ancient CGI-BIN style, they may be restricted to only the files in the CGI-BIN directory. -- Wulfraed Dennis Lee Bieber AF6VN wlfraed@ix.netcom.com HTTP://wlfraed.home.netcom.com/