JP Stones — Fri, 02 Jul 1999 17:59:00 +0000

Bah, I missed out on all the fun.
JP

----------
The Webmaster Promotion and Resource Center.
http://www.what-next.com

Stefen Enns — Fri, 02 Jul 1999 17:54:00 +0000

I got it to work fairly easily. Just make sure that the perl path at the top of the file is correct, and you have $footer_dir set to the full path of where you store the files you want to include. (You must have a trailing backslash. example: "/home/mypage/html/")

My advice is don't even bother with this script. I fooled around with it a bit on my machine and found it to be very insecure. For example... I run the UBB on my machine. The member profiles are stored in D:/Apache/ultimate/members/. I just had to type:

http://localhost/cgi-bin/smart-insert.cgi?../ultimate/members/admin5.cgi

And the script called up that file and sent all the information in that file to me. Among other things, that file contains the administrator password, which could mean trouble for my board if someone were to get ahold of it...

You're probably better off just using SSI to include the files. (Not only is it more secure, it'll also reduce the server load, as the server won't have to execure the CGI script every time the page is accessed)

Steve — Fri, 02 Jul 1999 17:03:00 +0000

I've ditched the script, and I'm just using

That seems to work just fine.

Thanks for your help.

Steve — Fri, 02 Jul 1999 02:38:00 +0000

You mean you got it to work?!?!?!

I have a pretty big site. 3 layouts.... It's a big hassle to update 3 versions of a page, and upload 3 different versions.

I downloaded a 'Footer' program, so I just need to edit a TXT (or HTML) file and each page will be updated. A lot easier.

The problem with that is I'll need to install multiple versions of the same CGI script, for each page.

This one allows me to use a single CGI program, but multiple source files.

I'll keep toying around with it, and hopefully get it to work.

(NOTE: I did NOT make this script )

Stefen Enns — Fri, 02 Jul 1999 01:16:00 +0000

*sigh* It's me again.

After fooling around with the script on my system a bit, I would like to discourage the use of it. It is VERY poorly writen, and it can be used by anyone to grab the contents of other files on the server. (In a test, I used it to grab the source code for a Perl script on my system. It worked.)

Just my $0.02

Stefen Enns — Fri, 02 Jul 1999 01:10:00 +0000

I just noticed the instructions say to include the script with:

It should be:

HTH

Stefen Enns — Fri, 02 Jul 1999 01:04:00 +0000

First of all, the first line of the script should be "#!/usr/bin/perl" or something similar. ("#!/usr/local/bin/perl" may work as well.)

Second, why go to all this trouble to include an HTML file, when you could just use:

HTH