*************************************************************************** ***** BACKROOM.PL ***** *************************************************************************** The backroom.pl script is a simple database/file management script normally used in conjunction with an online ordering system in which the orders are saved as separate text files in a certain specified subdirectory. The backroom.pl script displays these files and allows you to view or delete them. When viewing them, you can print them from your browser. This especially comes in handy when taking secure information which would not be secure if emailed through normal email channels. It is therefore wiser to store the submission on the server and retreive it later via a secure browser session using this script. How do I keep just anyone from running backroom.pl and seeing my data files? Put the backroom.pl script in a subdirectory of your cgi-bin directory and password protect that directory using the .htaccess/.htpasswd method. Also, put your datafile subdirectory below the backroom.pl directory so it too is protected. # VARIABLES TO MODIFY IN THE SCRIPT ############################# # What is your directory on the server? # (Full Path) $user_dir = '/usr/local/etc/httpd/vhosts/widget'; # What is the directory where the backroom.pl script resides? $script_dir = 'widget/cgi-bin/protected'; # What is your data directory to store the data files in? # (Full Path) $orders_dir = '/usr/local/etc/httpd/vhosts/widget/cgi-bin/protected/data'; # what is the URL without the directory structure, no trailing slash (/) # if this is SSL, make sure to put https instead of http. $base_url = 'https://www.speedsoft.com'; # what is the datafile extension used? (i.e. .txt or .dat, etc.) $extension = '.txt'; ###########################################################################