Date: 2009jun1
Platform: Apache
Language: SSI
Q. My Apache error log says
"[Mon Jun 01 12:19:16 2009] [error] [client 1.2.3.4] exec used but not allowed in /example/myfile.shtml, ..."
How can fixed this?
A. Sounds like you have a Server Side Include (.shtml) file that is doing
this:
<!--#exec cmd="./myprogram"-->
For this to be allowed you need:
Options -IncludesNoExec
in your /etc/httpd/conf/httpd.conf file.
Or the /etc/httpd/conf.d/mysite.conf file.
Notice that this directive is a double negative. Its saying
"not not exec" which means "exec" is allowed.
Of course, allowed exec has big security issues so you should only
enable this directive in the parts of your site whre its absolutely
needed.
| What this info useful to you? You can donate to say thanks |
Add a comment
Sign in to add a comment