Sometime on Mar 16, Satya assembled some asciibets to say:
Now the Perl CGI file definitely has to be readable and executable by the webserver. What about the file with the password? It should also be readable by the webserver daemon.
no it doesn't. if you're running under suexec (and you should), then it only needs to be readable by you, not by the world. in that case, the script runs as you, and the password file also needs to be readable only by you.
philip