Apache HTTP Server Version 2.4
Apache HTTP Server Version 2.4
� �� � º¸ � � � � � �� , � � 9� �� ¬´
�| '�/a>
ServerRoot � �
Server Side Includes
� CGI
ScriptAlias' CGI
ScriptAlias CGI
�) �
¤¸� ¹æ
�
� º¸
�
�/a>
±âº» � � º¸
�
�/a>
�� �
´º��/a>
9 � � � º¸ ¹® ±© � �� °ø ü � ±×� ¬°� � � ð°� ¹®$ � ±× �(4 5º ' � $ 9 ' � �� �4ä¸�, � �� º¸ �4 � ¤Á� 9 � � � �| ¸®$ � ±¸ � �% � 9 �(4 ¹è � � �$ ¾w ºþ °ø
¹° � � =¹® � �� °ø°Ý � °æ0 �' ±×º¸ 6� =, CGI � ¬¸� � ü ¹® � °ø°Ý � °æ0 � ±×� � ÁÖ � � ¸ð �(4 �4 � �
º¸
root �) � 9� , 2 ºþ
±â User � ' �) � � root� �
¸÷4
¤¸�, root �8 �) � ' ¸ø
� ÁÖ4 �� root� � �, ¸® ¸ð ¸® çÂ�
' � � ServerRoot� /usr/local/apache� �)
¤¸� root �) � � � � ¸® ¸Å±æ
mkdir /usr/local/apache
cd /usr/local/apache
mkdir bin conf logs
chown 0 . bin conf logs
chgrp 0 . bin conf logs
chmod 755 . bin conf logs
±×ì¸� /, /usr, /usr/local root� httpd � � � � � � º¸ � �
cp httpd /usr/local/apache/bin
chown 0 /usr/local/apache/bin/httpd
chgrp 0 /usr/local/apache/bin/httpd
chmod 511 /usr/local/apache/bin/httpd
htdocs ¸® ¤¸� �)$ � � -- root ±×°÷ � � ', ¸Å
root� �) � root� � °Å °±â¬% � ¤¸� � root � 9 � � ±º httpd � � ó°� ¤¸� � � =� � � logs ¸® (root� �) �) °±â¬% ¤¸� ±º á±� � ¤¸� � � ¬º¼¸� °É4 root� � �� � á±� � (root� �) �) °±â¬% ¤¸� ±º á±� � �� ±â
Server Side Includes (SSI) � ´¸� � º¸ ��' � �
ù ' � �� ¸® � 9 � SSI � ' � �� ¸ð SSI � ½´ Á¶ �� '�, �� � � � �) °æ �
, SSI � � CGI � ¬¸� � � �' SSI � "exec cmd"� �) � apache2.conf 9� � � � �) ±×·ì � CGI � ¬¸� � á±�� �
� � ¸é SSI � º¸ �$ ¹æ
SSI � °¼ � � °Ý¸®±â �´¸� � CGI � ¹æ� suexec� �) /p>
.html � .htm � � SSI � �) � � � � °ø °Å � � � °æ SSI � �� � �) .shtml � � � � °¼ ±×ì¸� � �� 5� � � ´¸�
¤¸� ¹æ SSI � � �
¬¸� � á±�� �
' ¸ø
� � ¬´ Options � Includes IncludesNOEXEC� �)
±× �
¬¸� �
ScriptAlias � ' ¸® ¤¸� <--#include virtual="..." -->� �)
CGI �
¬¸� � �
ÁÖ
°á±¹ � CGI � ¬¸�á±�� � ·Ú � �, �� �4°Ç CGI � º¸ ð°� � ±âº» � CGI � ¬¸� � � � �) � � � ¸÷4� � ±â ¹® ÁÖ � � ' ¼¸� ¸Å
¸ð CGI � ¬¸� � � �) � � ±â ¹® ¤¸� � ¬¸� � (�� �4°Ç) Ãæ �%1 � � �) A �) B� ¸Å �4 �) B CGI �4 ��$ 'ò¸� � ¬¸� � � 9 1.2 �� � � � 9 � � (hook) � suEXEC � ¬¸� � ¤¸� �) � � ¹æ $ ¤¸� $ ¹æ CGIWrap
� Á¶°Ç çÁ� � �) � � ¸®< CGI � ¬¸� � � � �
� ¸® � CGI� � � � ´¸� � ¸® � °æ0 scriptalias' CGIº¸ � ·Ú �) � ¸® ±Ù �, ´¸� � � CGI � ¬¸�á±�� � º¸ °ß �4 ¤¸�.
�� �4 � scriptalias' CGI ¹æ ¹æ �)
mod_php, mod_perl, mod_tcl, mod_python � � � � � �
¬¸� � � � �) � (User ' Âü
) �
±â ¹® , �
¬¸� ' �
�
¬¸� � �< � �) � ±Ù
¸ð � ±Ù
� �
¬¸� ' � '�, �
�' � "
�� �� �$¸é �) � .htaccess � �)
� � º¸ ±â� ó°�
� �< ¬´ ±×ì±� � � � ¹æ
� �< � 6�/p>
AllowOverride None
±×ì¸� �)�
� º¼ �
¸® �
� .htaccess � �)
�� "" 9 ±âº» ±Ù � � &, �� � URL �9 �) � ã ¤¸�, � Á¶ � ' ��48 � � � ºþ
� � � °æ
# cd /; ln -s / public_html
http://localhost/~root/ ±Ù
/code>
±×ì¸� ��48 � 2 �$ � � ç±� º¥ � � � Á¶ �
Order Deny,Allow
Deny from all
±×ì¸� �$
9 ±âº» ±Ù °Å ±Ù
� � � � Directory �� 6�
Order Deny,Allow
Allow from all
Order Deny,Allow
Allow from all
Location� Directory � � �)
°æ � ÁÖ � ±â8, � �
UserDir � �)
°æ0 ÁÖ � "./" � � � root �) �� °æ0 � ¹® � � 9 1.3 � �)
¤¸� � �< $ 6�� �%
�
UserDir disabled root
� � � ¹« � � � ' ¤¸� á±� /a> � � á±� � � �4 � º¸ '�, � � °ø°Ý ' ¤Á�� � ' � � �
�� ' :
grep -c "/jsp/source.jsp?/jsp/ /jsp/source.jsp??" access_log
grep "client denied" error_log | tail -n 10
ù ' ¸ø Source.JSP ÿ òº� Tomcat Ãë= � �) � °ø°Ý � ¤Á��, �' ±Ù °Å 5� ��48 10�� � � � º¸,
[Thu Jul 11 17:18:39 2002] [error] [client foo.bar.com] client denied by server configuration: /usr/local/apache/htdocs/.htpasswd
�
� � � ¬°�� º¸
±× ��48
�
.htpasswd � ±Ù
¤¸� � ��/a> � � � ±â � ¬´
foo.bar.com - - [12/Jul/2002:01:59:13 +0200] "GET /.htpasswd HTTP/1.1"
&, � � �< � �� ÁÖ 2¸® ¬´
Order allow,deny
Deny from all