How to disable CGI scripts

To disable CGI scripts such as .cgi .pl etc, You need to turn off CGI with Apache configuration like

Options -ExecCGI

For control panel users, you may need to modify related template to make the change permanent. For example, for Direct Admin, to apply it server wide, you can do it in /etc/httpd/conf/extra/httpd-directories.conf.

Also, you need to disable user from override “ExecCGI” option, with our DisableCgiOverride option.

<IfModule LiteSpeed>
  DisableCgiOverride On
</IfModule>

http://blog.litespeedtech.com/2013/03/15/closing-the-loopholes-disable-cgi-override/

 
litespeed_wiki/config/disable-cgi.txt · Last modified: 2016/02/09 15:51 by Jackson Zhang