Making your setup more secure

When configuring the access control for your server, you will want to make sure you do not give any unauthorized access to anyone. Please follow these guidelines to ensure that your server is not compromised. The limited capabilities of X1.1 Windows version negates the risks associated with server-side includes and script execution.

Use AllowOverride None wherever possible
Use this directive to prevent any "untrusted" directories (such as users' home directories) from overriding your settings (and thus allowing their friends to execute xterms as nobody with a server-side include or other such horrors).

Return to Access Configuration Instructions

httpd@ncsa.uiuc.edu