Page History

...

Expand

title	Click here to see a description of each module

Here

No

Yes

Status

colour	Green
title	YES

Control access based on client hostname, IP address or other characteristics of client request

mod_actions

2.0

No

Lets you run CGI scripts when a particular file or method is used in a request

Exclude if not using CGI scripts or have no need to execute scripts conditionally based on

request

requests. XSS vulnerability considerations. If included, ensure request parameters are not considered when making decisions based on content type
mod_alias	2.0	Used for simple URL manipulation tasks, including mapping URLs to filesystem paths and standard redirection.
mod_allowmethods	2.4	Restricts what HTTP methods can be used on a server
mod_asis	2.0	Allows you to send a document without adding the usual HTTP headers
mod_auth_basic	2.2	Used to restrict access with HTTP Basic Auth. Should be combined with at least one authentication module and one authorization module.	If this type of authentication is required, it is nearly imperative to use SSL as passwords are sent as almost plain text (base4 encoded).
mod_auth_digest	2.0	Used to implement HTTP Digest Auth.	If this type of authentication is required, it is nearly imperative to use SSL as an attacker can force the browser to downgrade to

basci

basic auth. The passwords are stored unsecurely on the server.
mod_auth_form	2.4	Allows the use of an HTML login form to restrict access	Depends on mod_session modules and makes use of HTTP cookies, which is susceptible to XSS attacks.
mod_authn_anon	2.2	Authentication - Provides anonymous user access to authenticated areas
mod_authn_core	2.4	Authentication - Provides core authentication capabilities
mod_authn_dbd	2.2	Authentication - Provides authentication against SQL tables
mod_authn_dbm	2.2	Authentication - Provides authentication against dbm password files
mod_authn_file	2.2	Authentication - Provides authentication against plain text password files
mod_authn_socache	2.4	Authentication - Maintains a cache of authentication credentials
mod_authnz_fcgi	2.4	Authorization - FastCGI authorizer application
mod_authnz_ldap	2.2	Authorization - Provides authorization through an LDAP directory
mod_authz_core	2.4	Authorization - Provides core authorization capabilities
mod_authz_dbd	2.4	Authorization - Provides group authorization based on SQL database
mod_authz_dbm	2.2	Authorization - Provides group authorization based on dbm files
mod_authz_groupfile	2.2	Authorization - Provides authorization against plain text files
mod_authz_host	2.4	Authorization - Provides authorization based host (name or IP)
mod_authz_owner	2.2	Authorization - Provides authorization based on file ownership
mod_authz_user	2.2	Authorization - Provides authorization based on authenticated user
mod_autoindex	2.0	Generates directory indexes

Versions Compared