I would like to know the risks of a python script that is outside of public_html


This script is called by the php application asynchronously. it receives an argument that determines which file folder will be deleted after x minutes and after update the mysql database

The folder that contains this script has 700 permisions and the owner is www-data. myscript.py has 700 permisions too

Can someone execute this script remotely? or maybe pass some python instruction? How could I prevent from potential risks?

I'm newbie, and I would like to learn.

1 Answer 1


Whether they can access it remotely depends on many things, such as your server's configuration details, and any security holes in your CGI scripts. The python script does not create any security risks merely by existing (if a remote user could execute it, they could use the same techniques to execute something like cat /etc/passwd or rm -rf /), but may present risks if a remote user can influence its operation.

You haven't provided enough information to give a definite "yes" or "no" to any of your questions, and for some of them, it requires a detailed analysis of the computer's configuration.

  • Thank you Mark. I will try to research more about possible security holes in my server and how to prevent it. Or maybe give more information in my next questions.
    – dac777
    Commented Jan 9, 2015 at 11:42

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .