<HTML>
<HEAD>
<META content="text/html; charset=iso-8859-1" http-equiv=Content-Type>
<META content="OPENWEBMAIL" name=GENERATOR>
</HEAD>
<BODY bgColor=#ffffff>
That's what I'm afraid of Michael.
<br />
<br />That "AllowOverride - ALL" is a server-wide setting. And wouldn't that open it up to possible vulnerabilities, maybe in other older-software sites on the server? We've got some customers who are running 10 year old PHP sites on our newer BlueOnyx servers - and having problems already.
<br />
<br />Not to mention... At least three or four times a year - someone finds & exploits a vulnerability in one of our customer's sites or users accounts. Then the server is sending out tons of SPAM, getting blacklisted, and the other users on it are bitching that they can't send e-mail.
<br />
<br />So I'm VERY leery of activating any abilities that might allow a exploit in the future. And I'd read that the AllowOverride option could do exactly that.
<br />
<br />
<br />Chuck
<br />
<br /><font size="2">
<br />
<br /><b>---------- Original Message
-----------</b>
<br />
From: Michael Stauber <mstauber@blueonyx.it>
<br />
To: BlueOnyx General Mailing List <blueonyx@mail.blueonyx.it>
<br />
Sent: Fri, 24 Jun 2016 12:55:31 -0500
<br />
Subject: [BlueOnyx:19762] Re: Enabling the rewrite module in Apache config
<br />
<br />> Hi Chuck,
<br />>
<br />>
> Does anyone have any experience with, or recommendations on enabling the
rewrite
<br />>
> module in the Apache config?
<br />>
<br />>
It's enabled by default on all BlueOnyx versions. You can verify it this
<br />>
way:
<br />>
<br />>
[root@5209r ~]# /usr/sbin/httpd -M|grep rewrite
<br />>
rewrite_module (shared)
<br />>
<br />>
So you (or your site developer) should be able to use it.
<br />>
<br />>
If you want to create your own rewrite rules, they can either go into
<br />>
the Vsites include config file:
<br />>
<br />>
/etc/httpd/conf/vhosts/siteX.include
<br />>
<br />>
... where they won't be overwritten by any changes. Or they could go
<br />>
into .htaccess files in /web or subdirectories of your actual Vsite.
<br />>
<br />>
For some of these functions to work in .htaccess files you need to allow
<br />>
them first via the GUI. For that see "Server Management" /
"Network
<br />>
Services" / "Web" and see under "Options" and
"Allow Override". You may
<br />>
have to tick both "All" checkboxes.
<br />>
<br />>
--
<br />>
With best regards
<br />>
<br />>
Michael Stauber
<br />>
_______________________________________________
<br />>
Blueonyx mailing list
<br />>
Blueonyx@mail.blueonyx.it
<br />>
<a target="_blank" href="http://mail.blueonyx.it/mailman/listinfo/blueonyx">http://mail.blueonyx.it/mailman/listinfo/blueonyx</a>
<br /><b>------- End of Original Message
-------</b>
<br />
</font>
</BODY>
</HTML>