Web Hosting Talk







View Full Version : is SSI secure?


Host Ultra
06-25-2002, 06:12 PM
Is it secure to allow SSI on free accounts?
Can it be used to show contents of some files that shouldnt be seen?

roly
06-26-2002, 07:55 AM
1. no
2. yes

priyadi
06-26-2002, 10:06 AM
That depends on your policy, but SSI is as secure as CGI. If you don't allow CGI you shouldn't allow SSI.

unilay
06-26-2002, 11:27 AM
SSI will read files using username/password which are configured by httpd.conf. Therefore it depends on this.