Alias vs. ScriptAlias
Is there a difference ( especially in terms of security ) between these
two chunks of configuration file code:
Alias /manager/ "/var/www/secure-bin/"
AddHandler cgi-script .pl
<Directory "/var/www/secure-bin">
SSLOptions +StdEnvVars
AllowOverride All
Options Indexes FollowSymLinks ExecCGI
Order allow,deny
Allow from all
</Directory>
.... and ...
ScriptAlias /manager/ "/var/www/secure-bin/"
<Directory "/var/www/secure-bin">
SSLOptions +StdEnvVars
AllowOverride All
Options Indexes FollowSymLinks
Order allow,deny
Allow from all
</Directory>
The difference is that the second one uses "ScripAlias" instead of the
"Alias" and does not have the "AddHandler" line?
|