httpd-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Nicholas Sanfratello <>
Subject Re: [users@httpd] Prevent users from running applications.
Date Wed, 10 Oct 2007 20:04:17 GMT
Thank you very much for your help! 


Ajai Khattri <> wrote: On Wed, 10 Oct 2007, Nicholas Sanfratello wrote:

> I am new to Apache HTTP server and had a question regarding user 
> privileges.  Is there a way to prevent users from running applications 
> (ex: CGI, php, shtml, ...)?  If so, how would I do this?  I would like 
> to only allow users to post files, not run applications.

For CGI, remove all ScriptAlias configuration directives and the .cgi 

For PHP, disable the module (comment out the lines that load the 
module) and remove the .php handler.

For server-side includes (.shtml) remove the ability to override Options 
and do "Options -Includes" in your configurations.


The official User-To-User support forum of the Apache HTTP Server Project.
See  for more info.
To unsubscribe, e-mail:
   "   from the digest:
For additional commands, e-mail:

Take the Internet to Go: Yahoo!Go puts the Internet in your pocket: mail, news, photos &
View raw message