httpd-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Ajai Khattri <a...@bitblit.net>
Subject Re: [users@httpd] Prevent users from running applications.
Date Wed, 10 Oct 2007 19:11:59 GMT
On Wed, 10 Oct 2007, Nicholas Sanfratello wrote:

> I am new to Apache HTTP server and had a question regarding user 
> privileges.  Is there a way to prevent users from running applications 
> (ex: CGI, php, shtml, ...)?  If so, how would I do this?  I would like 
> to only allow users to post files, not run applications.

For CGI, remove all ScriptAlias configuration directives and the .cgi 
handler.

For PHP, disable the module (comment out the lines that load the 
module) and remove the .php handler.

For server-side includes (.shtml) remove the ability to override Options 
and do "Options -Includes" in your configurations.



-- 
Aj.


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Mime
View raw message