1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
|
Template: cgiemail/template_dir
Type: string
Default: /var/www/template/
_Description: Where do you want to put cgiemail's mail templates?
In old versions of cgiemail, templates that were used for creating e-mails
to be sent could be placed anywhere that would be served up by the web
server. This behaviour is a security vulnerability: an attacker can read
files that he shouldn't be able to, such as scripts in cgi-bin, if they
contain certain pieces of text.
.
If you enter nothing (that is, erase the default directory, leaving this
empty), cgiemail will still work. This may be needed if you are, for
instance, hosting web services, and cannot move all of your clients
cgiemail templates to one directory. Remember that this will LEAVE THE
SECURITY HOLE OPEN, and is only a choice for backwards compatibility.
.
To close the hole, enter a directory, which MUST be accessible by
your web server. Template files that you want to use should go there.
For further instructions, please read the README.Debian and README files
in /usr/share/doc/cgiemail/.
|
