Disable Server Side Includes (SSI) In CPanel
Jun 16, 2009I have issue with my shared server. Someone used SSI to local attack user on my server.
I want to disable SSI but i dont find out how to ? (expect manual recomplie apache)
I have issue with my shared server. Someone used SSI to local attack user on my server.
I want to disable SSI but i dont find out how to ? (expect manual recomplie apache)
how to run SSI(server side includes) on my linus server,
View 1 Replies View RelatedI want to enable our server ssi server side includes (.shtml parsed).
My hosting company controls our server uptime, daily backup, server loads etc. when i request them; can you please enable ssi for shtml pages, i want to use ssi includes etc.. they suggested me use php instead of shtml for includes.
I want to .shtml, beacuse i use only ssi include header, footer same pages, also these pages search engine friendly.
Apache version: 2.0.52
I posted them please add following lines and restart apache afterwards:
Options +IncludesNoExec
AddType text/html .shtml
AddOutputFilter INCLUDES .shtml
They added and restarted apache, but not any affect. When i access .shtml pages via web browser, page opening successfully but not parse ssi includes, example:
<!--#include file="header.html" -->
but not parse, also i cannot use .htaccess files, our server admin say restricted them because security reasons.
I requested them our server root username and password, they say to me; before give you server root password, we remove all our server administration software from server and server administration service will be cancelled.
My server is Win2003 Standard with IIS 6. I'm using IIS6 to host websites but i have a need to run subversion which require Apache. I'm wondering would it cause any problem with my current operation. Apache will run on different port than the standard 80.
View 3 Replies View RelatedI have a problem I am tracing on a single virtual host on a dedicated server running whm/cpanel and apache 2.2.9. I am tracking down a 500 internal server error on a group of cgi scripts (that works on another virtual host on the same server). Apache was installed with easy apache included with whm.
My problem has been narrowed to the cgi-bin itself. To test I created a simple hello world script that runs in the web directory of this particular virtual host, but gives a 500 error when run in the cgi-bin.
Looking at the configs for apache, boy is this a mess, I have a group of configs in /etc/httpd/conf and another group in /usr/local/apache/conf. When I restarted apache it seems to be reading the /usr/local/apache ones (even though they both look the same in /etc/httpd also.
On the httpd.conf file, the virtual hosts are listed there with all the paths I need. But above each one it gives a warning:
DO NOT EDIT. AUTOMATICALLY GENERATED. IF YOU NEED TO MAKE A CHANGE PLEASE USE THE INCLUDE FILES.
The include is listed on the virtual host as:
Include "/usr/local/apache/conf/userdata/domain/domain.com/*.conf"
on the one that works. And in the following format:
Include "/usr/local/apache/conf/userdata/std/2/domain2/domain2.com/*.conf"
on the one that doesn't.
The funny thing is that /usr/local/apache/conf/userdata does not exist.
This makes me truly appreciate my DirectAdmin server. Anyone have ideas where to look for adjusting apache server settings on this type of setup?
And is this complicated setup due to easy apache or cPanel itself?
I am having some trouble with getting 'include' working. I have a new dedicated server running Apache 2.0.63 and PHP 5.2.6. Local includes on the same domain are running ok, but remote includes are throwing a problem. On the many sites we plan to host on this servber we use a central 'webmaster' page called as an include from a specific site (also on the same server).
I need to edit the PHP.ini and /or recompile the PHP with the appropriate modules to do one of the following...
1 (ideally) - allow includes from any site that is held on this dedicated server
2. allow includes from specified websites
3. simply allow remote includes
right settings to get one of these
options running and solve my problem?
I've been asked to find a way to host our intranet externally without opening up the network.
The webserver accessible to the public domain is within an dmz. The intranet I need to serve is within our internal network.
I've managed to convince our network admin to open port 80 on the server running the intranet but I can't seem to find a way to proxy the content from the intranet server, through the webserver and to the user.
I am trying to follow this guide on how to configure procmail:
[url]
I can login to my dedicated server via SSH, but how do I edit files etc. should this be done via SFTP, or via Shell?
i was wondering if there is any other free anti-spam filter other than Spam Assassin that can be used on a VPS account?
View 13 Replies View RelatedDoes anyone know how I can create a server-side filter in Plesk 8? I need to filter incoming mail to my mail server (using X-Forwarded-For.
View 0 Replies View RelatedThis topic has probably been covered many times. I am trying to block spam bots from direclty accessing scripts on my site. Measures I have taken thus far, also block my site pages that want are designed to use the scripts. This includes Hot Link Protection and a couple of directives in the .htaccess file.
how I can block direct access to my scripts?
I've problem with my system (Dell vostro200) I've Mcafee security center and it will block some scripts running in the system during the browsing. I can't use any of vBulletin forums ( registration and posting ) I can't do even Mcafee online registratation also. I'm not an expert in os configurations.
View 0 Replies View Relatedif it's possible to disable the ability to send email for accounts using a certain package in cPanel? I tried searching, I didn't find anything really relevant. Would it be possible to maybe create a rule, or script to add a rule to each account using a package to just block that username or account from sending email?
View 5 Replies View RelatedPrior to installing FFmpeg and its dependencies, I want to know about FFmpeg server-side conversion without the php script. Does it require those php scripts in the first place or I can just run an ssh command?
Also, does this FFmpeg have a configuration file in which you can set the quality of the converted .fla videos?
How about a lossless quality conversion and keeping the size proportion of the video the same?
Meaning, for example, from .avi to .fla without sacrificing/loosing the quality much or noticeably.
I was just wondering what does /22 subnet includes? I mean what sort of following numbers/blocks?
View 2 Replies View RelatedI have a windows 2003 "web edition" dedicated server leased from fasthosts.
I would like to store some asp includes in a specific location on the server that can be called by different domains.
I have my postfix server configured to allow me to send email without authentication whenever my ip matches a value in my config. Only problem is, i have it open to accept anyone in my subnet, and i'm kind of weary of letting anyone in this area send mail through it.
I have a script on my server that gets my ip address whenever i send an http-based request to my winamp now playing script. When it gets my ip address, it updates a file called ip.txt with my ip address. What i'm trying to do is config my postfix main.cf file to grab the ip from ip.txt, and add it onto the mynetworks variable. Then when i try to send the email, i want it to recognize me, and let me send the email.
what includes your ideal web hosting package. How many space, data transfer, which features? How much do you care about uptime, customer support etc.?
I believe it would be interesting if webmasters can write here how looks their ideal hosting plan...
We upgraded 7 servers from our network from PHP 4.4.7 to PHP 5.2.5, and Apache 1.3.3.9 to Apache 2.0.61. In only one of this servers we found problems with includes...
Include example that works:
Code:
<?
include("http://www.google.com");
?>
This doesnt work:
Code:
<?
include("path/file.php");
?>
And path/file.php does exist, also log error from apache doesnt even show a line .
allow_url_fopen was replaced by allow_url_include and it's set to On.
Im using PHP 5.2.5, Apache 2.0.61, cPanel and RHES 4.
Has anyone tried any online backup services which gives mobile access also. I have been thinking about trying one. But I'm not sure if any are better than others. My main concern is security.
View 0 Replies View RelatedI use the Apache server included with Mac OSX as my local development and testing environment for front-end web coding work. On the latest update to Yosemite (10.10), all of my .shtml files stopped processing my include virtual statements (or any SSI statements, for that matter).
I'm not seeing any errors, but the includes just show up like commented out code in the HTML when I view source. I've set up Apache to use a httpd-vhosts.conf for my various local dev servers (project1.local, test.local, etc...) Nothing seems to work.
Im wondering I have some things turned off like:
The PDO extension in PHP, pdo_mysql, etc.
Most scripts use PHP and MySQL extension so no problem at all until i came up with 1 little devil taht requires php with PDO and pdo_mysql
My question is, is there any side effect on a production server if i recompile apache with those extensiones turned on?
Do they run in parallel to the way php and mysql runs now or will it break the whole scripts running and send the server to hell?
Basically what i mean is, i have the resources on the server to run it but do they run in parallel or they change/reconfigure the whole way php and mysql works?
I configured WebDisk on my webhost (via cPanel) and it works great on one computer but with the other there is a slight problem:
When the password was first entered it was mistyped, saved somewhere (I have no idea where, that's what I am trying to find out) and now whenever I try to connect I receive an error:
Quote:
There was a problem connecting to the WebDisk service
I tried to reset the password via Internet Explorer (Tools | Options) but that cleared other passwords, not the WebDisk one.
Any idea how to reset that password (on Windows, the client side)?
Who in 5851 West Side Ave (Switch and Data facility) in North Bergen, NJ does half cabinets? Looking to get my hands on a half cab with 20amps. I know of AMC, already contacted them.
View 3 Replies View Relatedi have a cpanel server with centos,
and i put a script on it,
and i get the error
-----------------------------------------------------
Warning: Unknown: Your script possibly relies on a session side-effect which existed until PHP 4.2.3. Please be advised that the session extension does not consider global variables as a source of data, unless register_globals is enabled. You can disable this functionality and this warning by setting session.bug_compat_42 or session.bug_compat_warn to off, respectively. in Unknown on line 0
-----------------------------------------------------
How do I configure Lighttpd to serve images/javascript/css files that are littered about my websites? Can I just input the paths of all the directories that I want Lighttpd to serve from?
For example, I have 4 separate websites with each having a message board, main page etc... Could I have lighty serve the files from:
/var/www/html/site1/images
/var/www/html/site2/images
/var/www/html/site3/images
/var/www/html/site4/images
/var/www/html/site1/javascript
etc....
and have Apache serve the files from all the other directories?
any one can apply php scripts under cpanel like:
domain.com:2082/scripts.php
I have run phpinfo for looking for cpanel php.ini I have
Configuration File (php.ini) Path /usr/local/cpanel/3rdparty/etc
I renamed /usr/local/cpanel/3rdparty/etc to /usr/local/cpanel/3rdparty/etc.OLD
then restart the server I am still get cpanel php work and phpinfo give :
Configuration File (php.ini) Path /usr/local/cpanel/3rdparty/etc
how to disable cpanel php to prevent some one exploit php to hacking my server?
I've a VPS to run my only one website. As I don't use ftp, I'd like to know how to disable it.
I tried WHM -> Service Configuration -> Service Manager, then uncheck ftpd, but it's still there
I want to disable WHM/Cpanel.because client purchase dedicate server from us and he want to access from command line and no WHM/Cpanel so how can i do it and it will be effect on any service because i have installed all the service like dns, exim and http from WHM.
View 3 Replies View Related