Author Topic: Apache Symlink Disable?  (Read 3044 times)

0 Members and 1 Guest are viewing this topic.

Offline
*
Apache Symlink Disable?
« on: June 03, 2015, 09:36:29 AM »
Hello. First, English is not good.

How can we prevent Apache symlink or How can we provide security

Re: Apache Symlink Disable?
« Reply #1 on: June 04, 2015, 11:27:03 AM »
You need to apply your own patch for it.

Offline
*
Re: Apache Symlink Disable?
« Reply #2 on: June 11, 2015, 07:39:00 PM »
how ?

Offline
*****
Re: Apache Symlink Disable?
« Reply #3 on: July 11, 2015, 12:41:20 PM »
Hello.

Did you tried maybe add to the vhosts.conf (to the <Directory /path/to/files/>):
Code: [Select]
Options -FollowSymLinks ?
SymLinks does not works by default for php scripts, because CWP using suPHP. Also, for the other files (not .php) you can use:
Code: [Select]
Options FollowSymLinks SymLinksIfOwnerMatch
« Last Edit: July 11, 2015, 12:47:24 PM by Igor S. »

Re: Apache Symlink Disable?
« Reply #4 on: July 11, 2015, 04:15:23 PM »
Anyone can override it easily. So its more of a kind useless.

Offline
*
Re: Apache Symlink Disable?
« Reply #5 on: December 12, 2016, 04:13:16 PM »
Hello. First, English is not good.

How can we prevent Apache symlink taxi orly or How can we provide security

I especially think that you have to do a comparative study to choose them