Host Ultra
06-25-2002, 06:12 PM
Is it secure to allow SSI on free accounts?
Can it be used to show contents of some files that shouldnt be seen?
Can it be used to show contents of some files that shouldnt be seen?
![]() | View Full Version : is SSI secure? Host Ultra 06-25-2002, 06:12 PM Is it secure to allow SSI on free accounts? Can it be used to show contents of some files that shouldnt be seen? roly 06-26-2002, 07:55 AM 1. no 2. yes priyadi 06-26-2002, 10:06 AM That depends on your policy, but SSI is as secure as CGI. If you don't allow CGI you shouldn't allow SSI. unilay 06-26-2002, 11:27 AM SSI will read files using username/password which are configured by httpd.conf. Therefore it depends on this. |