Java Mailing List Archive

http://www.junlu.com/

Home » Home (12/2007) » Servlet Interest »

Re: Servlet Security

Nic Ferrier

2004-09-30

Replies:

Mark Galbreath <mgalbreath@(protected):

> Nic,
>
> You have not convinced me that CGI is intrinsically unsecure. Granted,
> servlets are a better alternative, but Apache mod-perl and php CGI with
> security policies in place make CGI just as "safe."
>

mod_perl and php are NOT connected to CGI.

mod_perl, mod_python, php, et al are all *in process*. That means a
separate process (with all the dangers that involves) is not needed.

In CGI a seperate process *must* be started to handle the request.


So your rejection is misconstrued.


Nic

___________________________________________________________________________
To unsubscribe, send email to listserv@(protected)
of the message "signoff SERVLET-INTEREST".

Archives: http://archives.java.sun.com/archives/servlet-interest.html
Resources: http://java.sun.com/products/servlet/external-resources.html
LISTSERV Help: http://www.lsoft.com/manuals/user/user.html
©2008 junlu.com - Jax Systems, LLC, U.S.A.