[PLUG] SSI includes cool, but I guess they aren't compiled in...

Michael C. Robinson michael at goose.robinson-west.com
Sat Aug 30 21:21:01 UTC 2003


On my custom apache server.  Is there an easy way to find out if I
didn't compile in support for them?  I got one working on Redhat 7.3's
apache package.  I think my custom apache 1.3.27 is statically compiled
without support for modules or at the very least I think the modules it
will run are tightly controlled.  What's the security story for server
side includes?  If they were disabled during compilation it is probably
because of instructions in Securing and Optimizing Redhat Linux 
The Ultimate Solution by Gerhard Mourani intended to tighten security.
I didn't even add PHP support to this server having had trouble
with Horde in the past and deciding it's probably too buggy to
be secure.

I found out my apache documentation wasn't opening on my custom server
because the filenames were wrong, fixed that and found quite a bit on
server side includes :-)

Are the following two lines placed in httpd.conf all that's needed to
get SSI working?

AddType text/html .shtml
AddHandler server-parsed .shtml

If so, do you add them under a certain section or can they be 
added anywhere in the file?  There's something about adding
Options +Includes, how do you add this to httpd.conf as it
seems to need to go in a particular spot?  I couldn't find
it looking at Redhat's apache under httpd.conf, maybe they put 
it in a .htaccess file.

     --  Michael C. Robinson




More information about the PLUG mailing list