What do I put in the af.cgi for $base_path <br /><br /> I want to put my different templates in folders and no matter what I have tried, I have not been able to get this to work.<br /><br /> If I leave this blank, the script runs from cgi-bin/ with the files there, but not if I put the files in cgi-bin/templates/ <br /><br /> Thanks for your help<!--content-->
I haven't seen this script before; do you have a link to it? Someone else may have some experience that could help you in the meantime. =)<!--content-->
Not sure which version you are trying to install but you may want to read this. <!--coloro:blue--><span style="color:blue"><!--/coloro-->http://seclists.org/lists/bugtraq/2002/Jun/0073.html<!--colorc--></span><!--/colorc--><br /><!--quoteo--><div class='quotetop'>QUOTE</div><div class='quotemain'><!--quotec-->Subject to file permissions, an attacker can read any <br />Â Â Â Â Â Â Â Â file on the server, append arbitrary data to any <br />Â Â Â Â Â Â Â Â existing file or write arbitrary data to new files.<!--QuoteEnd--></div><!--QuoteEEnd--><br /><br />This is in version 1.5, don't know about version 2.<!--content-->
The actual link from the developer does not exist anymore. but some information and a link to the actual file download is here.<br /><br /><a href="http://help.powweb.com/tutorials/cgi/formmail/alienform.php" target="_blank">http://help.powweb.com/tutorials/cgi/formmail/alienform.php</a><br /><br />Information in the cgi file regarding base path is this.<br /><br /><!--quoteo--><div class='quotetop'>QUOTE</div><div class='quotemain'><!--quotec--># Set this to the base path of your templates. The files specified in<br /># the HTML and log template will be appended to this to make the real<br /># file name. Can be an absolute path, or a path relative to the script.<br /># NOT a URL!<br />$base_path = '/www/u/user/htdocs/templates/';<!--QuoteEnd--></div><!--QuoteEEnd--><br /><br />I wanted to store the template folder within my cgi-bin folder. maybe that is the problem I am running into, for some reason maybe I cannot do that?<br /><br /> U have tried /cgi-bin/templates<br />/templates/<br />/~ivnkjs/cgi-bin/templates<br /><br /> and none of these work, I get an error file does not exist<br /><br />Thanks again for any help that you can give.<br /><br />Jeff<!--content-->
Is your domain propogated?<br /><br />If it is, you can try /home/cpanelname/public_html/cgi_bin<br /><br />It's very probable that the templates do need to be outside of the cgi_bin or it'll try to execute them, rather than read them.<br /><br />If this does have some possible security holes be very carefu; you are responsible for what happens on your account, including if you installed a problematic script. If you want some suggestions on more secure scripts we can help with that, too. =)<!--content-->
Lisa,<br /><br /> Thank you very much for your reply. I would love to know of another way to do this that would be more secure. I have been using this script for about 3 years now, on this provider and the last one and didnt run into any problems, but I am always open to new, better ways to do something of this nature.<br /><br /> Thanks again!<br /><br />Jeff<!--content-->
Is this just an email form? If it is you could try out what is the favorite of many on this forum - <a href="http://www.surefirewebdesign.com/scripts/" target="_blank">Ultimate Form Mail</a><!--content-->
I haven't seen this script before; do you have a link to it? Someone else may have some experience that could help you in the meantime. =)<!--content-->
Not sure which version you are trying to install but you may want to read this. <!--coloro:blue--><span style="color:blue"><!--/coloro-->http://seclists.org/lists/bugtraq/2002/Jun/0073.html<!--colorc--></span><!--/colorc--><br /><!--quoteo--><div class='quotetop'>QUOTE</div><div class='quotemain'><!--quotec-->Subject to file permissions, an attacker can read any <br />Â Â Â Â Â Â Â Â file on the server, append arbitrary data to any <br />Â Â Â Â Â Â Â Â existing file or write arbitrary data to new files.<!--QuoteEnd--></div><!--QuoteEEnd--><br /><br />This is in version 1.5, don't know about version 2.<!--content-->
The actual link from the developer does not exist anymore. but some information and a link to the actual file download is here.<br /><br /><a href="http://help.powweb.com/tutorials/cgi/formmail/alienform.php" target="_blank">http://help.powweb.com/tutorials/cgi/formmail/alienform.php</a><br /><br />Information in the cgi file regarding base path is this.<br /><br /><!--quoteo--><div class='quotetop'>QUOTE</div><div class='quotemain'><!--quotec--># Set this to the base path of your templates. The files specified in<br /># the HTML and log template will be appended to this to make the real<br /># file name. Can be an absolute path, or a path relative to the script.<br /># NOT a URL!<br />$base_path = '/www/u/user/htdocs/templates/';<!--QuoteEnd--></div><!--QuoteEEnd--><br /><br />I wanted to store the template folder within my cgi-bin folder. maybe that is the problem I am running into, for some reason maybe I cannot do that?<br /><br /> U have tried /cgi-bin/templates<br />/templates/<br />/~ivnkjs/cgi-bin/templates<br /><br /> and none of these work, I get an error file does not exist<br /><br />Thanks again for any help that you can give.<br /><br />Jeff<!--content-->
Is your domain propogated?<br /><br />If it is, you can try /home/cpanelname/public_html/cgi_bin<br /><br />It's very probable that the templates do need to be outside of the cgi_bin or it'll try to execute them, rather than read them.<br /><br />If this does have some possible security holes be very carefu; you are responsible for what happens on your account, including if you installed a problematic script. If you want some suggestions on more secure scripts we can help with that, too. =)<!--content-->
Lisa,<br /><br /> Thank you very much for your reply. I would love to know of another way to do this that would be more secure. I have been using this script for about 3 years now, on this provider and the last one and didnt run into any problems, but I am always open to new, better ways to do something of this nature.<br /><br /> Thanks again!<br /><br />Jeff<!--content-->
Is this just an email form? If it is you could try out what is the favorite of many on this forum - <a href="http://www.surefirewebdesign.com/scripts/" target="_blank">Ultimate Form Mail</a><!--content-->