Download Introduction to the Apache Web Server

Section 13
SSI
http://httpd.apache.org/docs/howto/ssi.html
http://httpd.apache.org/docs/mod/mod include.html
Directives written into the HTML pages, which are processed by the server as the page is being served.
• Add dynamic content to an existing HTML page
• Include external text files (headers, footers)
13.1
Configuration for SSI
• Options +Includes
• Options +IncludesNOEXEC
I
f you have AllowOverride Options enabled (or AllowOverride All, which includes
Options) then people can put these directives in their .htaccess files, overriding your
security precautions.
• Enabling by file extension
AddType text/html .shtml
AddHandler server-parsed .shtml
This causes all files with a .shtml extension to be parsed for SSI directives.
The disadvantage of this approach is that you have to
– Expose the mechanism (ie, everyone knows how you are generating the effect)
75