服务器端代码的安全性？ [英] Security of server-side code?

问题描述

回到上个世纪的无辜日子，我会在我的网页上使用

mailto链接来允许人们取消我。在垃圾邮件发送者和其他犯罪分子大量收集地址的时代，那就是b $ b不再是谨慎的。我想写一个小CGI，它会发送一封

消息，而不会将我的地址暴露给网络蜘蛛。问题是

是否仍然可以通过HTTP检索CGI的代码。任何

的信息都将不胜感激。


BTW，我是否重新发明轮子？


-

Shmuel（Seymour J.）Metz，SysProg和JOAT< http://patriot.net/~shmuel>


未经请求的批量电子邮件受法律保护行动。我保留

公开发布或嘲笑任何滥用电子邮件的权利。回复

域名Patriot dot net用户shmuel + news与我联系。不要

回复 sp ****** @ library.lspace.org

Back in the innocent days of the last century, I would have used a
mailto link in my web page to allow people to cancel me. In the era of
mass harvesting of addresses by spammers and other criminals, that is
no longer prudent. I''d like to write a small CGI that will mail a
message without exposing my address to web spiders. The question is
whether the code for the CGI can still be retrieved via HTTP. Any
information would be appreciated.

BTW, am I reinventing the wheel?

--
Shmuel (Seymour J.) Metz, SysProg and JOAT <http://patriot.net/~shmuel>

Unsolicited bulk E-mail subject to legal action. I reserve the
right to publicly post or ridicule any abusive E-mail. Reply to
domain Patriot dot net user shmuel+news to contact me. Do not
reply to sp******@library.lspace.org

推荐答案

文章< 41 ******************* ********@news.patriot.net> ，
sp******@library.lspace.org.inva 盖子开悟我们......

In article <41***************************@news.patriot.net> ,
sp******@library.lspace.org.invalid enlightened us with...

回到上个世纪无辜的日子里，我会在我的网页上使用一个
mailto链接，让人们取消我。在垃圾邮件发送者和其他犯罪分子大量收集地址的时代，这已经不再谨慎了。我想写一个小CGI，它会发送一条消息，而不会将我的地址暴露给网络蜘蛛。问题是，是否仍然可以通过HTTP检索CGI的代码。任何
信息都将不胜感激。

BTW，我是否重新发明轮子？

Back in the innocent days of the last century, I would have used a
mailto link in my web page to allow people to cancel me. In the era of
mass harvesting of addresses by spammers and other criminals, that is
no longer prudent. I''d like to write a small CGI that will mail a
message without exposing my address to web spiders. The question is
whether the code for the CGI can still be retrieved via HTTP. Any
information would be appreciated.

BTW, am I reinventing the wheel?

Mailto不好用各种原因，其中最少的是垃圾邮件

收获。

蜘蛛不会找到邮件加载，因为它是在服务器端代码中。

服务器将html传递给请求者，无论是浏览器还是蜘蛛。

地址不在html中。这是邮件的参考资料。


是的，你正在重新发明轮子。 ;）

如果你有CGI，请使用Formmail.pl或类似的。如果您正在使用ASP，请使用CDONTS。

如果JSP，JavaMail。


-

-

~kaeli~

每个日历的日期都有编号。
http://www.ipwebdesign.net/wildAtHeart
http://www.ipwebdesign.net/kaelisSpace

Mailto is bad for a variety of reasons, the least of which is spam
harvesting.
Spiders will not find the mailer addy because it''s in server-side code. The
server passes out html to the requester, be it a browser or a spider. The
address isn''t IN the html. It''s in the params to the mailer.

Yes, you ARE reinventing the wheel. ;)
If you have CGI, use Formmail.pl or similar. If you''re using ASP, use CDONTS.
If JSP, JavaMail.

--
--
~kaeli~
Every calendar''s days are numbered.
http://www.ipwebdesign.net/wildAtHeart
http://www.ipwebdesign.net/kaelisSpace

In< MP ******* *****************@nntp.lucent.com> ;,于08/20/2004

于02:23 PM，kaeli< ti * *****@NOSPAM.comcast.net>说：

In <MP************************@nntp.lucent.com>, on 08/20/2004
at 02:23 PM, kaeli <ti******@NOSPAM.comcast.net> said:

蜘蛛将找不到邮件程序，因为它是在服务器端的代码中。


你是说他们无法通过HTTP访问

public_html / cgi-bin中的anthing，或者只是说他们的垃圾邮件不是'$

通常这样做？

如果你有CGI，请使用Formmail.pl

Spiders will not find the mailer addy because it''s in server-side
code.
Are you saying that there''s no way for them to access anthing in
public_html/cgi-bin via HTTP, or just that their spamware doesn''t
normally do so?
If you have CGI, use Formmail.pl

doesn'它有安全问题吗？


-

Shmuel（Seymour J.）Metz，SysProg和JOAT< http://patriot.net/ ~shmuel>


未经请求的批量电子邮件受法律诉讼。我保留

公开发布或嘲笑任何滥用电子邮件的权利。回复

域名Patriot dot net用户shmuel + news与我联系。不要

回复 sp ****** @ library.lspace.org

doesn''t it have security issues?

--
Shmuel (Seymour J.) Metz, SysProg and JOAT <http://patriot.net/~shmuel>

Unsolicited bulk E-mail subject to legal action. I reserve the
right to publicly post or ridicule any abusive E-mail. Reply to
domain Patriot dot net user shmuel+news to contact me. Do not
reply to sp******@library.lspace.org

On Sun，2004年8月22日00:07:26 -0300，Shmuel（Seymour J.）Metz

< ; SP ****** @ library.lspace.org.invalid>写道：

On Sun, 22 Aug 2004 00:07:26 -0300, Shmuel (Seymour J.) Metz
<sp******@library.lspace.org.invalid> wrote:

如果你有CGI，请使用Formmail.pl

If you have CGI, use Formmail.pl

它没有安全性问题？

doesn''t it have security issues?

使用NMS版本。它与您获得AFAIU一样安全。

Use the NMS version. It''s as secure as you can get AFAIU.

这篇关于服务器端代码的安全性？的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！