Allow clients to change WEBSITE - OPTIONS

Discussion in 'Feature Requests' started by labsy, Nov 16, 2016.

  1. labsy

    labsy Member

    Is there any particular reason for CLIENTS to not have the OPTIONS tab under WebSites? I guess the worst thing they can do is under custom Apache and PHP options, which will render their web site useless. But will not influence the whole server. I mean, the damage made there is less likely to happen than potential damage via obsolete PHP coding practice, which clients have an option anyways.
    So, I suggest let's enable the OPTIONS tab for them.
  2. Jesse Norell

    Jesse Norell Well-Known Member Staff Member Howtoforge Staff

    Apache options are put directly into the vhosts config, so you simply put in a </VirtualHost> tag and you are back at global apache config; as long as you stick another <VirtualHost *:80> in there and add the required beginnings of a virtual host, it'll pass syntax checks and be loaded live. You just gave away full control over your web server.
  3. labsy

    labsy Member

    Aha...this means it's just a security issue due to very complicated syntax checks.
    I hope we can get some checker/parser for PHP and APACHE options, so to give end-users some more flexibility via OPTIONS tab. If I figure out something, I'll keep you posted.

Share This Page