How to prohibit direct cgi excution!?

Hi, anyone have the answer to this:

If I enter the location and name of a script in the location bar of the browser the script runs as normal.

I have tried
<Location /cgi-bin/scripname.pl>
Order Allow,Deny
Allow from somepath/somehtmlpage
</Location>

In vain the above prevents the script from running at all but I want the script to be executed by a link on a page and only by that link on an html page.

>>f I enter the location and name of a script in the location bar of the browser

This is GET method.

If your script accepts just POST method, the easiest way to solve your problem is to:

<Location /cgi-bin/scripname.pl>
<Limit GET>
Order deny,allow
Deny from all
</Limit>
<LimitExcept POST>
Order allow,deny
Allow from all
</LimitExcept>
</Location>

You can't set Allow from to path.


It it must be GET method:

SetEnvIf Referer "^http://www.domain.com/somepath/somehtmlpage.html$" ok
<Location /cgi-bin/scripname.pl>
Order Deny,Allow
Deny from all
Allow from env=ok
</Location>