 Ҷ     Ʈ ̴.   Ϲ̰,   ġ شϴ ̴.





ġ        ü ϴ. ׷ ũ ۰ ǥ ߰ߵǴ    . ׷ Ʈ ֽŹ ϴ  ߿ϴ. ġ   ٿεߴٸ, ο   Ʈ ˷ִ ġ  ǥ ϸƮ ϱ  Ѵ. ġ Ʈ ϴ  ڵ鵵  񽺸 Ѵ.

  ڵ嶧   ϴ   ʴ. ׺ ߰ ڵ, CGI ũƮ,  ü   ϴ 찡 . ׷Ƿ ׻ ϸ ý  Ʈ Ʈؾ Ѵ.


ServerRoot 丮 

 root ڰ ġ  , û ϱ User þ  ڷ ȯѴ. root ϴ ɾ ִٸ, root ̿ ڰ  ϵ ؾ Ѵ.  ϵ root   ־ ϰ, 丮  丮 .  , ServerRoot /usr/local/apache Ѵٸ root ڰ   丮  Ѵ:

mkdir /usr/local/apache 
cd /usr/local/apache 
mkdir bin conf logs 
chown 0 . bin conf logs 
chgrp 0 . bin conf logs 
chmod 755 . bin conf logs
׷ /, /usr, /usr/local  root   ִ. httpd  ġҶ   ȣؾ Ѵ:

cp httpd /usr/local/apache/bin 
chown 0 /usr/local/apache/bin/httpd 
chgrp 0 /usr/local/apache/bin/httpd 
chmod 511 /usr/local/apache/bin/httpd
htdocs 丮 ٸ ڵ   ֵ   ִ -- root װ ִ  ,  ʾƾ Ѵ.

root ƴ ڰ root ϰų Ⱑ    ִٸ ý root  ĥ  ִ.  ,  httpd  Ͽٸ  Ҷ  ڵ带 ϰ ȴ. logs 丮 (root ƴ ڿ) Ⱑϴٸ  α ٸ ýϷ ɺũ ɾ root Ͽ  ڷḦ   ִ. α (root ƴ ڿ) Ⱑϴٸ  α׿ ̻ ڷḦ   ִ.


Server Side Includes

Server Side Includes (SSI)  ڿ Ȼ   ̴.

ù°   ϸ ø ̴. ġ Ͽ SSI þ ִ ο   SSI  мؾ Ѵ.  ϰ ,     ϴ ȯ濡 ɰ  ִ.

, SSI  Ϲ CGI ũƮ   . SSI Ͽ "exec cmd" ϸ httpd.conf ġ ϵ  ڿ ׷  CGI ũƮ α׷   ִ.

 Ȱϸ鼭 SSI   Ű  ִ.

SSI    ִ ظ ݸϱ ڴ Ϲ CGI  ϴ  suexec   ִ

.html̳ .htm Ȯڸ SSI Ϸ ϴ  ϴ. Ư   ϰų ŷ   ȯ濡 ϴ. SSI  Ϲ  ϴ .shtml   Ȯڸ  Ѵ. ׷  ϸ ּȭϰ Ҹ    ִ.

ٸ  SSI  ũƮ α׷  ϵ  ̴. Options þ Includes  IncludesNOEXEC Ѵ. ׷ ũƮ ScriptAlias þ  丮 ִٸ <--#include virtual="..." --> Ͽ CGI ũƮ    ϶.


Ϲ CGI

ᱹ  ׻ CGI ũƮ/α׷ ڸ ŷؾ ϰ, ǰ Ǽ̰ CGI  Ȼ  ߰  ־ Ѵ. ⺻ CGI ũƮ    ýۿ  ɾ   ֱ⶧ ְ Ȯ  ſ ϴ.

 CGI ũƮ  ڷ Ǳ⶧ ٸ ũƮ (ǰ Ǽ̰) 浹 ɼ ִ.  ,  A  B ſ ȾϿ,  B CGI ͺ̽  ũƮ ۼ  ִ. ġ 1.2  ԵǾ ġ  Ư (hook) ϴ suEXEC ũƮ ٸ ڷ ϴ  ϳ. ٸ   CGIWrap ִ.


ScriptAlias  CGI

  Ҷ ڰ  丮 CGI ũƮ ϵ   ִ:

 ǰ Ǽ̰ ڰ ý ݿ Ű ũƮ ۼ ʴ´ٰ ϴ´.
ý ٸ κ  ؼ,   ϳ     ٰ ϴ .
ڰ , Ƹ ƹ  湮ʴ .

ScriptAlias CGI

Ư 丮 CGI   ֵ ϸ ڴ ̵ 丮   ִ.   scriptalias  CGI Ȯ ϴ. , ŷϴ ڸ 丮   ְ, ڰ ο CGI ũƮ/α׷  Ȼ  ˻ ̰ ִٸ.

κ Ʈ scriptalias  CGI     Ѵ.


  ϴ ٸ 

mod_php, mod_perl, mod_tcl, mod_python   Ϻη ϴ Ӻ ũƮ   ڷ (User þ ) Ǳ⶧, ũƮ  ϴ ũƮ   ڰ   ִ  Ϳ   ִ.  ũƮ    , ϴٰ  ʴ  .


ý  ȣϱ

   Ϸ ڰ .htaccess  Ͽ   ȱ ϱ ٶ  ̴. ׷    ִ.

 Ͽ  ߰Ѵ

<Directory /> 
AllowOverride None 
</Directory>
׷ 밡ϵ   丮 ϰ .htaccess    .


⺻  ִ  ȣϱ

  ġ ⺻ ٿ  ߸ ˰ִ. ,  Ϲ URL  Ģ Ͽ  ã  ִٸ, Ư ġ  ʴ Ŭ̾Ʈ  񽺵  ִ.

 , Ʒ  :

# cd /; ln -s / public_html 
http://localhost/~root/  Ѵ
׷ Ŭ̾Ʈ ü Ͻý ƴٴ  ִ. ̸     ġ Ѵ:

<Directory /> 
Order Deny,Allow 
Deny from all 
</Directory>
׷ Ͻý ġ  ⺻  źεȴ. ϴ    ֵ   Directory  ߰Ѵ.

<Directory /usr/users/*/public_html> 
Order Deny,Allow 
Allow from all 
</Directory> 
<Directory /usr/local/httpd> 
Order Deny,Allow 
Allow from all 
</Directory>
Location Directory þ  ϴ  Ư Ǹ ￩.  , <Directory />  źϴ <Location /> þ ̸   ִ

UserDir þ ϴ 쿡 ϶. þ "./"  ϸ root ڿ  ٷ     ߻Ѵ. ġ 1.3 ̻ Ѵٸ  Ͽ Ʒ  ߰ϱ  Ѵ:

UserDir disabled root

α 캸

    ־ ִ ˷ α  Ѵ. α ̹ Ͼ ϸ ,    ־ ˷ְ  ʿ ŭ  Ȯϰ ش.

 :

grep -c "/jsp/source.jsp?/jsp/ /jsp/source.jsp??" access_log 
grep "client denied" error_log | tail -n 10
ù°  ߸ Source.JSP û  ˾Ƴ  ִ Tomcat  ̿Ϸ  Ƚ ˷ְ, ι°   źε ֱ Ŭ̾Ʈ 10   ش:

[Thu Jul 11 17:18:39 2002] [error] [client foo.bar.com] client denied by server configuration: /usr/local/apache/htdocs/.htpasswd
   α ̹ ߻ Ǹ Ѵ. ׷ Ŭ̾Ʈ .htpasswd Ͽ   ־ٸ  α׿     ̴:

foo.bar.com - - [12/Jul/2002:01:59:13 +0200] "GET /.htpasswd HTTP/1.1"
,   Ͽ  κ ּó ̴:

<Files ~ "^\.ht"> 
Order allow,deny 
Deny from all 
