This is an old revision of the document!

How to disable CGI scripts

To disable CGI scripts such as .cgi .pl etc, You need to turn off CGI with Apache configuration like 

Options -ExecCGI

If applying it server wide, you can do it in /etc/httpd/conf/extra/httpd-directories.conf. For control panel users, you may need to modify related template to make the change permanent.

Also, you need to disable user from override “ExecCGI” option, with our DisableCgiOverride option. 

<IfModule LiteSpeed>
  DisableCgiOverride On
</IfModule>

http://blog.litespeedtech.com/2013/03/15/closing-the-loopholes-disable-cgi-override/

  • Admin
  • Last modified: 2016/02/09 14:47
  • by Jackson Zhang