nearlyfreespeech runs with safe mode and safe_mode_gid on, so you can't run shell scripts or other cool things. Usually that's not an issue, but if you do, they let you run CGI scripts, in any of a number of languages. You just have to treat it as a shell script, with a shebang notation of the proper language. There are a few caveats that took me a day to find out:
- The correct program is
/usr/local/bin/php-cgi(or whereever your server puts PHP), not/usr/local/bin/php. That is the command-line interpreter, which does not output the headers. You can manually doecho "Content-type: text/html\n"etc., followed by a blank line, but who wants to try to debug that? - The script has to be executable. You get a 500 Server Error otherwise. Do a
chmod +x scriptname.cgi. - Scripts need the appropriate file and directory permissions to write to the server. Changing the permissions of the server directory is probably too insecure (though for safe mode it's the only way); it's better to set-uid the script, but then keep it under wraps.
So a sample CGI script would be:
#!/usr/local/bin/php-cgi
<?php echo "Hello, world"; ?>in an executable file with a .cgi extension.
Note that FTP and SFTP can't set the setuid bit, so that if you upload the file (or edit it with an FTP-aware editor like Notepad++), you need to chmod 477 scriptname.cgi again.
Leave a Reply