• Welcome to the Chevereto user community!

    Here users from all over the world gather around to learn the latest about Chevereto and contribute with ideas to improve the software.

    Please keep in mind:

    • 😌 This community is user driven. Be polite with other users.
    • 👉 Is required to purchase a Chevereto license to participate in this community (doesn't apply to Pre-sales).
    • 💸 Purchase a Pro Subscription to get access to active software support and faster ticket response times.

FollowSymlinks Security Issue

GPGT

Chevereto Member
in the .htaccess file, is using +FollowSymlinks a must?

I understand that FollowSymlinks has some security issue and using +SymLinksIfOwnerMatch is recommended.

Some control panel like Virtualmin doesn't allow the use of FollowSymlinks anymore and will spew internal server 500 error.
 
Actually Chevereto doesn't need the use of +FollowSymlinks and is placed there just for compatibility issues with some hosters. I've never known someone or read about that someone got security issues due to this. Feel free to remove/alter/whatever that line.
 
Back
Top