[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [cobalt-security] Re: SSI Vuln on cobalt



Will our front page websites still work?

At 06:33 PM 4/21/2002, you wrote:
Hi Chris,

> And, as I've pointed out before, all of those cute little checkboxes are
> useless.  If I want to use SSI, all I have to do is put:
>
> AddType text/html .shtml
> AddHandler server-parsed .shtml
>
> in an .htaccess file.

IF your Apache access.conf has ...

<Directory /home/sites/>
AllowOverride All
Options All
</Directory>

... set, then who do you blame? :o) Set it to "AllowOverride None" and all
these fancy .htaccess files in /home/sites/wherever will no longer work.

--

Mit freundlichen Grüßen / With best regards

Michael Stauber
mstauber@xxxxxxxxxxxxxx
Unix/Linux Support Engineer

_______________________________________________
cobalt-security mailing list
cobalt-security@xxxxxxxxxxxxxxx
http://list.cobalt.com/mailman/listinfo/cobalt-security

Paul Jacobs /Senior Network Eng.
Yourwebcentral.com
"Host ANY website "
http://www.yourwebcentral.com
mailto:paul@xxxxxxxxxxxxxxxxxx