i can use apache as a way to run and test cgi programs on my comp, yes?
Yes. Apache is a web server that will enable you to do that exactly.
i don't really need to use it as my website server, i do have a competant company i use.
That is how I use mine. I develop code for clients on my system and then move/install it on their's.
if i just use it to test my stuff, there is no risk, other than what we are all subject to?
If you are connected to the net with a web server running (apache) then you are vulnerable. If you are not connected, you can run the web server on your local machine and test you code with no risk.
There are real risks associated with how you write your code. There are also real risks associated with how you setup your web server. If you are running a system that will allow you to create users and control their permissions, then you should create a web server user that has very limited abilities. You can imagine that if you set up your web server user with root (or admin) priviledges, then when you system was compromised, the invader would have root abilities. VERY BAD! However, if all your web server is allowed to do is read and write it's own files, then the only thing it can hurt is itself and the rest of your system is a little safer. This is one example of many possible vulnerabilities.
For more, take a look at
To see about Perl's taint mode, see
and, get a book. There is a lot to read/learn on this subject and it is worth learning. I don't want to scare you away from running a web server. I run one and find it indespensible. You just need to be aware of the risks and how to minimize them. 'hope this helps
If you are new to Tek-Tips, please use descriptive titles, check the FAQs, and beware the evil typo.