Permissions Problem Guestbook 1.5

Hello,

Our web host recently locked the permissions on our scripts, because somebody from AOL complained that their email address was posted in our guestobook.

We worked out the problems with the host, and they reset the permissions, but now when a guestbook entry is submitted, the entry is added to the guestbook.html page properly, but the following error is returned for the confirmation or "Thank You" page. As result, people hit "submit" multiple times:

Internal Server Error
The server encountered an internal error or misconfiguration and was unable to complete your request.

Please contact the server administrator, webmaster [at] eschellon [dot] com and inform them of the time the error occurred, and anything you might have done that may have caused the error.

More information about this error may be available in the server error log.

Apache/1.3.33 Server at eschellon.com Port 80

All files were CHMOD to 755, the host won't allow 777

http://www.eschellon.com/index2.html (frames page)

Then click on Guestbook at top.

Any ideas ??

Thanks

Peter

You should disable html in the guestbook.

You should turn off indexing on your server, because your files list is exposed.

A good host, like the one I am using, would have this problem resolved for you in minutes. If you pay them for service, you might want to consider switching to a better provider.

It sounds like the book directory has to be 777, but maybe Carbonize can advise you by looking at the code from the guestbook.pl file:

open(FILE,">$base_dir/$book_file") || &error("The directory $base_dir requires mode 777!");
flock(FILE,2) if ($lock == 1);
 foreach $line (@booklines) {
 if ($line =~ /^.*.*/) {
 ($part1, $part2) = split(/\s*/,$line);
 print FILE "$part1";
 print FILE "\n";
 print FILE "\n";
 print FILE "<tr bgcolor=\"$entry_bg\"><td width=\"32%\">\n<table border=0 cellspacing=0 cellpadding=2>\n";
 print FILE "<tr><td>$entry_id)</td>\n";
 print FILE "<td>$FORM{'username'}</td></tr>";
 if ($FORM{'email'}) {
 print FILE "<tr><td><img src=\"$mail_img\" width=20 height=17></td>\n";
 print FILE "<td><a href=\"mailto:$FORM{'email'}\">$FORM{'email'}</a></td></tr>\n"; 
 } 
 if ($FORM{'url'}) {
 print FILE "<tr><td><img src=\"$url_img\" width=20 height=20></td>\n";
 print FILE "<td><a href=\"$FORM{'url'}\" target=\"_blank\">$FORM{'url'}</a></td></tr>\n"; 
 }
 print FILE "</table>\n</td><td width=\"68%\">\n";
	 print FILE "$FORM{'message'}<hr size=1>\n";
 print FILE "<img src=\"$arrow_img\" width=9 height=9>$this_day $host</td></tr>\n";
 print FILE "\n";
 print FILE "$part2";
 $succes = 1;
 }
 else {
 print FILE "$line";
 }
 }
close(FILE);

Hehehe reminds me of the fact I am being threatened for posting somebodies email addresses on my blog. Tough. I clearly said only one entry per person.