Global Server Side Includes?

6 posts / 0 new
Last post
#1 Mon, 05/18/2009 - 17:15
jahlewis

Global Server Side Includes?

What is the best way to enable Server Side Includes for all sites on a server? I'm not seeing anything in the "Edit Server Template" section...

Thanks.

Mon, 05/18/2009 - 17:17
Joe
Joe's picture

Add "Includes" to the Options section of the Directory section of the Apache Server Template.

--

Check out the forum guidelines!

Mon, 05/18/2009 - 17:18 (Reply to #2)
Joe
Joe's picture

Oh, and this won't effect existing virtual servers (pretty much nothing in Server Templates does). You'll need to hit them up individually.

--

Check out the forum guidelines!

Sun, 06/07/2009 - 07:55
jahlewis

So this is what it should look like?
[code:1]<Directory ${HOME}/public_html>
Options -Indexes IncludesNOEXEC FollowSymLinks Includes
allow from all
AllowOverride All
</Directory>
<Directory ${HOME}/cgi-bin>
allow from all
</Directory>[/code:1]

Sun, 06/07/2009 - 07:55
jahlewis

So this is what it should look like?
[code:1]<Directory ${HOME}/public_html>
Options -Indexes IncludesNOEXEC FollowSymLinks Includes
allow from all
AllowOverride All
</Directory>
<Directory ${HOME}/cgi-bin>
allow from all
</Directory>[/code:1]

Mon, 05/18/2009 - 18:08
andreychek

Howdy,

Well, you need to choose between "Includes" and "IncludesNOEXEC" (your example contains both).

You can read about the two here:

http://httpd.apache.org/docs/2.0/mod/mod_include.html

But essentially, "Includes" allows users to use the "exec" option, and "IncludesNOEXEC" disables the ability for users to call "exec".

It's certainly no worse than what you can do with CGI (ie, PHP, Perl, Ruby, etc), but the difference is that in your above configuration, CGI apps are only allowed to be executed from within /cgi-bin/.

It all depends on how much your trying to lock things down :-)
-Eric

Topic locked