[thelist] SSI's

[Ani Phelan]

Are there any security risks in doing that for HTML files?

 
	             ani phelan 
      	       aphelan at ajava.biz
                 p: 800.786.2885
                 f.   714.774.7881

-----Original Message-----
From: thelist-bounces at lists.evolt.org
[mailto:thelist-bounces at lists.evolt.org] On Behalf Of Maximillian Von
Schwanekamp
Sent: Wednesday, July 28, 2004 3:09 PM
To: thelist at lists.evolt.org
Subject: Re: [thelist] SSI's

Rob Smith wrote:

>All this talk about SSI's has got me thinking. Are there any other
pages
>besides .php, .asp, and .shtml that accept and can use SSI's?
>
Depending on your server setup, any file text type can be 
server-parsed.  E.g. in Apache, adding directives (e.g. in .htaccess or 
httpd.conf) such as:
AddType text/x-server-parsed-html .html #allows .html files to be parsed

like .shtml
AddType application/x-httpd-php .html #allows .html to be parsed as .php

On most sites, this is trivial and effective.  On a high-traffic site, 
arbitrarily telling the Apache to parse every .html file could be a bad 
idea...

Maximillian Von Schwanekamp
Dynamic Websites and E-Commerce
NeptuneWebworks.com <http://www.neptunewebworks.com/>
voice: 541-302-1438
fax: 208-730-6504


-- 
* * Please support the community that supports you.  * *
http://evolt.org/help_support_evolt/

For unsubscribe and other options, including the Tip Harvester 
and archives of thelist go to: http://lists.evolt.org 
Workers of the Web, evolt !