Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!

FollowSymLink protection and Frontpage

Discussion in 'Security' started by denisdekat09, Oct 15, 2010.

  1. denisdekat09

    denisdekat09 Well-Known Member

    Joined:
    Mar 2, 2002
    Messages:
    265
    Likes Received:
    0
    Trophy Points:
    316
    Location:
    San Francisco
    Hello all...

    I set up this as to protect against FollowSymLink type hacks...

    <Directory "/home">
    Options +All -FollowSymLinks +IncludesNOEXEC -Indexes +MultiViews +SymLinksIfOwnerMatch
    AllowOverride All Options=ExecCGI,Includes,IncludesNOEXEC,Indexes,MultiViews,SymLinksIfOwnerMatch
    </Directory>

    I am having customers now who still use FrontPage running into problems. Anyone know what this could be? Does FrontPage require FollowSymLink? It does not seem to work with Options +SymLinksIfOwnerMatch in the .htaccess.

    Thanks for any ideas :)
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #1 denisdekat09, Oct 15, 2010
  2. cPanelTristan

    cPanelTristan Quality Assurance Analyst
    Staff Member

    Joined:
    Oct 2, 2010
    Messages:
    7,609
    Likes Received:
    32
    Trophy Points:
    238
    Location:
    somewhere over the rainbow
    cPanel Access Level:
    Root Administrator
    It appears a ticket was already submitted about this matter.

    As the ticket basically mentioned, FrontPage does require FollowSymLinks to be enabled, and it will not work with SymLinksIfOwnerMatch in the .htaccess file.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #2 cPanelTristan, Oct 15, 2010
  3. denisdekat09

    denisdekat09 Well-Known Member

    Joined:
    Mar 2, 2002
    Messages:
    265
    Likes Received:
    0
    Trophy Points:
    316
    Location:
    San Francisco
    yeah thanks! I was suggested an attempt in the forums in hopes to find some sort of solution ;)
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #3 denisdekat09, Oct 15, 2010
(You must log in or sign up to post here.)
Loading...
Similar Threads - FollowSymLink protection Frontpage
  1. durangod

    Followsymlinks and SymlinksIfOwnerMatch for single user

    durangod, Jan 4, 2017, in forum: Security
    Replies:
    3
    Views:
    768
    cPanelMichael
    Jan 23, 2017
  2. Skin

    Apache Symlink Protection False positive?

    Skin, Jun 6, 2018, in forum: Security
    Replies:
    3
    Views:
    65
    cPanelLauren
    Jun 6, 2018
  3. matt1206

    No symlink protection detected

    matt1206, May 31, 2018, in forum: Security
    Replies:
    5
    Views:
    79
    cPanelMichael
    Jun 1, 2018
  4. celiac101

    Is Symlink Race Condition Protection Needed on a Non-Shared Server?

    celiac101, May 17, 2018, in forum: Security
    Replies:
    4
    Views:
    119
    celiac101
    May 21, 2018
  5. ottdev

    SOLVED cphulk - period - protection or detection ?

    ottdev, Mar 11, 2018, in forum: Security
    Replies:
    7
    Views:
    189
    cPanelMichael
    Apr 19, 2018

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...
    Dismiss Notice