Disable Apache’s following of Symbolic Links


Environment : APache webserver

-          By default Apache webserver follows symlinks,
-          We can turn off this feature with FollowSymLinks with Options directive.
-          Open the HTTD.conf file and add the below line.
# Options -FollowSymLinks

-          If there is a need for FollowSymLinks feature, can be enabled by writing in the rule in “.htaccess” file from that website.
# Enable symbolic links
              # Options +FollowSymLinks
Note: To enable rewrite rules inside “.htaccess” file “AllowOverride All” should be present in the main configuration globally.

No comments:

Post a Comment