How to block CGI, while allowing some scripts?

http://www.domainstobuy.com/faq.php

Can I run CGI/PHPscripts on the server?

Due to security reasons, we do not allow applications and scripts to be run
on our servers. We have few hosted scripts like message board, hit counter
available for you. You can signup for these and link it from your website.



I want to know to how could this be possible, as they only allow some
scripts and block all others. I think as long as they open some scripts, I
can upload and run any. Is that the case?

<a style='text-decoration: underline;' href="http://links.i6networks.com" target="_blank">http://links.i6networks.com</a> wrote:

 > I think as long as they open some scripts, I can upload and run any. Is
 > that the case?

In your httpd.conf file only allow script execution (Options +ExecCGI)
from one particular directory. Make sure that "they" don't have write
access to that directory. Don't allow people to over-ride your
CGI-blocking with their .htaccess files (use the "AllowOverrides"
directive, but please don't be trigger-happy with it -- allowing some
overrides can be very useful!).

--
Toby A Inkster BSc (Hons) ARCS
Contact Me ~ <a style='text-decoration: underline;' href="http://tobyinkster.co.uk/contact" target="_blank">http://tobyinkster.co.uk/contact</a>
Now Playing ~ ./james/the_best_of_james/10_out_to_get_you.ogg<!-- ~MESSAGE_AFTER~ -->