Webserver security


Each of the subdirectories underneath the CGI directory where you installed the application are susceptable to various forms of attack or security breach, and should be protected through your Webserver. All Webservers provide some security mechanism to help prevent this from happening. Apache uses .htaccess to provide this functionality. Please refer to your Webserver documentation for more information on configuring your .htaccess files.

The advertisers, scripts, and system directories should all be configured so that none of the files within them can be accessed via the Web.

The admin directory should be configured so that it is only available for access by a system administrator by username and password.