3 ms·

Apache is the standard solution in web hosting. Its "killer feature" are htaccess files. It provides a possibility to give users a limited way to configure the

by hannob 9y ago

Apache is the standard solution in web hosting. Its "killer feature" are htaccess files. It provides a possibility to give users a limited way to configure their virtual hosts, without giving them too much power. (Unfortunately there are some unfixed systemic security issues with that, namely symlink attacks...)

sk5t 9y ago
I'd imagine one could crush the server with pathological rewrite regexps too.
- hannob 9y ago
  You can, and it's very unfortunate that the apache devs don't consider these things vulnerabilities. (I reported a DoS via password hashes a while ago.)