Resist the urge to add threats and insults to the user message. As the message sent by the script suggests, alerts generated by the script should be verified by examining the web server logs. CGI probes usually come as part of an overall attempt to inventory a server for vulnerabilities of any kind. There is no substitute for due diligence by developers to create secure code in the first place. System administrators must also delete sample scripts and configuration holes when installing web and application server software on production Internet servers.
Many organizations track and report on web server security problems, including CGI script holes.
Heavy Industries Rootshell Also, check out our web tip Writing secure web applications for suggestions on good programming practices for web application development. All Rights Reserved.