Linux ip-172-26-2-223 5.4.0-1018-aws #18-Ubuntu SMP Wed Jun 24 01:15:00 UTC 2020 x86_64
Apache
: 172.26.2.223 | : 3.138.174.90
Cant Read [ /etc/named.conf ]
8.1.13
www
www.github.com/MadExploits
Terminal
AUTO ROOT
Adminer
Backdoor Destroyer
Linux Exploit
Lock Shell
Lock File
Create User
CREATE RDP
PHP Mailer
BACKCONNECT
UNLOCK SHELL
HASH IDENTIFIER
CPANEL RESET
CREATE WP USER
BLACK DEFEND!
README
+ Create Folder
+ Create File
/
www /
server /
apache /
manual /
mod /
[ HOME SHELL ]
Name
Size
Permission
Action
core.html
535
B
-rw-r--r--
core.html.de
238.47
KB
-rw-r--r--
core.html.en
293.44
KB
-rw-r--r--
core.html.es
262.51
KB
-rw-r--r--
core.html.fr.utf8
324.56
KB
-rw-r--r--
core.html.ja.utf8
254.26
KB
-rw-r--r--
core.html.tr.utf8
313.84
KB
-rw-r--r--
directive-dict.html
598
B
-rw-r--r--
directive-dict.html.en
17.79
KB
-rw-r--r--
directive-dict.html.es
19.47
KB
-rw-r--r--
directive-dict.html.fr.utf8
19.11
KB
-rw-r--r--
directive-dict.html.ja.utf8
20.06
KB
-rw-r--r--
directive-dict.html.ko.euc-kr
15.65
KB
-rw-r--r--
directive-dict.html.tr.utf8
19.11
KB
-rw-r--r--
directives.html
760
B
-rw-r--r--
directives.html.de
57.67
KB
-rw-r--r--
directives.html.en
57.54
KB
-rw-r--r--
directives.html.es
57.83
KB
-rw-r--r--
directives.html.fr.utf8
57.65
KB
-rw-r--r--
directives.html.ja.utf8
57.74
KB
-rw-r--r--
directives.html.ko.euc-kr
57.39
KB
-rw-r--r--
directives.html.tr.utf8
57.57
KB
-rw-r--r--
directives.html.zh-cn.utf8
57.41
KB
-rw-r--r--
event.html
201
B
-rw-r--r--
event.html.en
28.84
KB
-rw-r--r--
event.html.fr.utf8
31.36
KB
-rw-r--r--
index.html
720
B
-rw-r--r--
index.html.de
23.21
KB
-rw-r--r--
index.html.en
22.93
KB
-rw-r--r--
index.html.es
23.49
KB
-rw-r--r--
index.html.fr.utf8
25.14
KB
-rw-r--r--
index.html.ja.utf8
24.2
KB
-rw-r--r--
index.html.ko.euc-kr
22.37
KB
-rw-r--r--
index.html.tr.utf8
23.2
KB
-rw-r--r--
index.html.zh-cn.utf8
22.81
KB
-rw-r--r--
mod_access_compat.html
322
B
-rw-r--r--
mod_access_compat.html.en
28.41
KB
-rw-r--r--
mod_access_compat.html.fr.utf8
31.22
KB
-rw-r--r--
mod_access_compat.html.ja.utf8
30.51
KB
-rw-r--r--
mod_actions.html
489
B
-rw-r--r--
mod_actions.html.de
13.78
KB
-rw-r--r--
mod_actions.html.en
12.72
KB
-rw-r--r--
mod_actions.html.fr.utf8
13.32
KB
-rw-r--r--
mod_actions.html.ja.utf8
14.43
KB
-rw-r--r--
mod_actions.html.ko.euc-kr
12.37
KB
-rw-r--r--
mod_alias.html
479
B
-rw-r--r--
mod_alias.html.en
36.82
KB
-rw-r--r--
mod_alias.html.fr.utf8
40.04
KB
-rw-r--r--
mod_alias.html.ja.utf8
28.55
KB
-rw-r--r--
mod_alias.html.ko.euc-kr
22.95
KB
-rw-r--r--
mod_alias.html.tr.utf8
39.33
KB
-rw-r--r--
mod_allowmethods.html
223
B
-rw-r--r--
mod_allowmethods.html.en
8.09
KB
-rw-r--r--
mod_allowmethods.html.fr.utf8
8.4
KB
-rw-r--r--
mod_asis.html
386
B
-rw-r--r--
mod_asis.html.en
8.9
KB
-rw-r--r--
mod_asis.html.fr.utf8
9.18
KB
-rw-r--r--
mod_asis.html.ja.utf8
9.74
KB
-rw-r--r--
mod_asis.html.ko.euc-kr
8.47
KB
-rw-r--r--
mod_auth_basic.html
410
B
-rw-r--r--
mod_auth_basic.html.en
19.57
KB
-rw-r--r--
mod_auth_basic.html.fr.utf8
21.6
KB
-rw-r--r--
mod_auth_basic.html.ja.utf8
16.32
KB
-rw-r--r--
mod_auth_basic.html.ko.euc-kr
13.84
KB
-rw-r--r--
mod_auth_digest.html
319
B
-rw-r--r--
mod_auth_digest.html.en
20.11
KB
-rw-r--r--
mod_auth_digest.html.fr.utf8
21.9
KB
-rw-r--r--
mod_auth_digest.html.ko.euc-kr
20.41
KB
-rw-r--r--
mod_auth_form.html
217
B
-rw-r--r--
mod_auth_form.html.en
50.41
KB
-rw-r--r--
mod_auth_form.html.fr.utf8
54.73
KB
-rw-r--r--
mod_authn_anon.html
410
B
-rw-r--r--
mod_authn_anon.html.en
16.5
KB
-rw-r--r--
mod_authn_anon.html.fr.utf8
17.97
KB
-rw-r--r--
mod_authn_anon.html.ja.utf8
18.47
KB
-rw-r--r--
mod_authn_anon.html.ko.euc-kr
16.05
KB
-rw-r--r--
mod_authn_core.html
219
B
-rw-r--r--
mod_authn_core.html.en
16.42
KB
-rw-r--r--
mod_authn_core.html.fr.utf8
17.58
KB
-rw-r--r--
mod_authn_dbd.html
217
B
-rw-r--r--
mod_authn_dbd.html.en
15.09
KB
-rw-r--r--
mod_authn_dbd.html.fr.utf8
16.31
KB
-rw-r--r--
mod_authn_dbm.html
406
B
-rw-r--r--
mod_authn_dbm.html.en
12.69
KB
-rw-r--r--
mod_authn_dbm.html.fr.utf8
13.59
KB
-rw-r--r--
mod_authn_dbm.html.ja.utf8
13.07
KB
-rw-r--r--
mod_authn_dbm.html.ko.euc-kr
11.09
KB
-rw-r--r--
mod_authn_file.html
410
B
-rw-r--r--
mod_authn_file.html.en
11.42
KB
-rw-r--r--
mod_authn_file.html.fr.utf8
12.21
KB
-rw-r--r--
mod_authn_file.html.ja.utf8
12.44
KB
-rw-r--r--
mod_authn_file.html.ko.euc-kr
10.54
KB
-rw-r--r--
mod_authn_socache.html
225
B
-rw-r--r--
mod_authn_socache.html.en
18.82
KB
-rw-r--r--
mod_authn_socache.html.fr.utf8
20.67
KB
-rw-r--r--
mod_authnz_fcgi.html
221
B
-rw-r--r--
mod_authnz_fcgi.html.en
26.98
KB
-rw-r--r--
mod_authnz_fcgi.html.fr.utf8
29.33
KB
-rw-r--r--
mod_authnz_ldap.html
221
B
-rw-r--r--
mod_authnz_ldap.html.en
84.3
KB
-rw-r--r--
mod_authnz_ldap.html.fr.utf8
86.91
KB
-rw-r--r--
mod_authz_core.html
219
B
-rw-r--r--
mod_authz_core.html.en
37.04
KB
-rw-r--r--
mod_authz_core.html.fr.utf8
40.05
KB
-rw-r--r--
mod_authz_dbd.html
217
B
-rw-r--r--
mod_authz_dbd.html.en
18.2
KB
-rw-r--r--
mod_authz_dbd.html.fr.utf8
19.98
KB
-rw-r--r--
mod_authz_dbm.html
313
B
-rw-r--r--
mod_authz_dbm.html.en
12.86
KB
-rw-r--r--
mod_authz_dbm.html.fr.utf8
13.75
KB
-rw-r--r--
mod_authz_dbm.html.ko.euc-kr
10.39
KB
-rw-r--r--
mod_authz_groupfile.html
430
B
-rw-r--r--
mod_authz_groupfile.html.en
10.4
KB
-rw-r--r--
mod_authz_groupfile.html.fr.ut...
10.93
KB
-rw-r--r--
mod_authz_groupfile.html.ja.ut...
9.9
KB
-rw-r--r--
mod_authz_groupfile.html.ko.eu...
8.8
KB
-rw-r--r--
mod_authz_host.html
219
B
-rw-r--r--
mod_authz_host.html.en
13.39
KB
-rw-r--r--
mod_authz_host.html.fr.utf8
14.35
KB
-rw-r--r--
mod_authz_owner.html
414
B
-rw-r--r--
mod_authz_owner.html.en
11.29
KB
-rw-r--r--
mod_authz_owner.html.fr.utf8
11.92
KB
-rw-r--r--
mod_authz_owner.html.ja.utf8
12.93
KB
-rw-r--r--
mod_authz_owner.html.ko.euc-kr
11.1
KB
-rw-r--r--
mod_authz_user.html
410
B
-rw-r--r--
mod_authz_user.html.en
8.11
KB
-rw-r--r--
mod_authz_user.html.fr.utf8
8.37
KB
-rw-r--r--
mod_authz_user.html.ja.utf8
7.39
KB
-rw-r--r--
mod_authz_user.html.ko.euc-kr
6.85
KB
-rw-r--r--
mod_autoindex.html
499
B
-rw-r--r--
mod_autoindex.html.en
60.78
KB
-rw-r--r--
mod_autoindex.html.fr.utf8
67.28
KB
-rw-r--r--
mod_autoindex.html.ja.utf8
64.92
KB
-rw-r--r--
mod_autoindex.html.ko.euc-kr
50.19
KB
-rw-r--r--
mod_autoindex.html.tr.utf8
66.14
KB
-rw-r--r--
mod_brotli.html
211
B
-rw-r--r--
mod_brotli.html.en
21.14
KB
-rw-r--r--
mod_brotli.html.fr.utf8
22.5
KB
-rw-r--r--
mod_buffer.html
211
B
-rw-r--r--
mod_buffer.html.en
9.06
KB
-rw-r--r--
mod_buffer.html.fr.utf8
9.57
KB
-rw-r--r--
mod_cache.html
390
B
-rw-r--r--
mod_cache.html.en
68.08
KB
-rw-r--r--
mod_cache.html.fr.utf8
74.14
KB
-rw-r--r--
mod_cache.html.ja.utf8
52.35
KB
-rw-r--r--
mod_cache.html.ko.euc-kr
38.51
KB
-rw-r--r--
mod_cache_disk.html
410
B
-rw-r--r--
mod_cache_disk.html.en
20.1
KB
-rw-r--r--
mod_cache_disk.html.fr.utf8
21.26
KB
-rw-r--r--
mod_cache_disk.html.ja.utf8
18.36
KB
-rw-r--r--
mod_cache_disk.html.ko.euc-kr
15.72
KB
-rw-r--r--
mod_cache_socache.html
225
B
-rw-r--r--
mod_cache_socache.html.en
18.28
KB
-rw-r--r--
mod_cache_socache.html.fr.utf8
19.06
KB
-rw-r--r--
mod_cern_meta.html
313
B
-rw-r--r--
mod_cern_meta.html.en
11
KB
-rw-r--r--
mod_cern_meta.html.fr.utf8
11.56
KB
-rw-r--r--
mod_cern_meta.html.ko.euc-kr
10.54
KB
-rw-r--r--
mod_cgi.html
382
B
-rw-r--r--
mod_cgi.html.en
18.42
KB
-rw-r--r--
mod_cgi.html.fr.utf8
20.06
KB
-rw-r--r--
mod_cgi.html.ja.utf8
19.72
KB
-rw-r--r--
mod_cgi.html.ko.euc-kr
16.31
KB
-rw-r--r--
mod_cgid.html
386
B
-rw-r--r--
mod_cgid.html.en
11.56
KB
-rw-r--r--
mod_cgid.html.fr.utf8
12.15
KB
-rw-r--r--
mod_cgid.html.ja.utf8
12.2
KB
-rw-r--r--
mod_cgid.html.ko.euc-kr
10.7
KB
-rw-r--r--
mod_charset_lite.html
322
B
-rw-r--r--
mod_charset_lite.html.en
15.35
KB
-rw-r--r--
mod_charset_lite.html.fr.utf8
16.54
KB
-rw-r--r--
mod_charset_lite.html.ko.euc-k...
14.28
KB
-rw-r--r--
mod_data.html
207
B
-rw-r--r--
mod_data.html.en
7.49
KB
-rw-r--r--
mod_data.html.fr.utf8
7.68
KB
-rw-r--r--
mod_dav.html
382
B
-rw-r--r--
mod_dav.html.en
17.91
KB
-rw-r--r--
mod_dav.html.fr.utf8
19.45
KB
-rw-r--r--
mod_dav.html.ja.utf8
20.66
KB
-rw-r--r--
mod_dav.html.ko.euc-kr
17.71
KB
-rw-r--r--
mod_dav_fs.html
394
B
-rw-r--r--
mod_dav_fs.html.en
10.75
KB
-rw-r--r--
mod_dav_fs.html.fr.utf8
11.4
KB
-rw-r--r--
mod_dav_fs.html.ja.utf8
10.6
KB
-rw-r--r--
mod_dav_fs.html.ko.euc-kr
10.17
KB
-rw-r--r--
mod_dav_lock.html
307
B
-rw-r--r--
mod_dav_lock.html.en
9.76
KB
-rw-r--r--
mod_dav_lock.html.fr.utf8
10.32
KB
-rw-r--r--
mod_dav_lock.html.ja.utf8
10.51
KB
-rw-r--r--
mod_dbd.html
205
B
-rw-r--r--
mod_dbd.html.en
24.71
KB
-rw-r--r--
mod_dbd.html.fr.utf8
26.94
KB
-rw-r--r--
mod_deflate.html
398
B
-rw-r--r--
mod_deflate.html.en
28.35
KB
-rw-r--r--
mod_deflate.html.fr.utf8
30.4
KB
-rw-r--r--
mod_deflate.html.ja.utf8
31.06
KB
-rw-r--r--
mod_deflate.html.ko.euc-kr
26.17
KB
-rw-r--r--
mod_dialup.html
211
B
-rw-r--r--
mod_dialup.html.en
7.49
KB
-rw-r--r--
mod_dialup.html.fr.utf8
7.81
KB
-rw-r--r--
mod_dir.html
469
B
-rw-r--r--
mod_dir.html.en
22.39
KB
-rw-r--r--
mod_dir.html.fr.utf8
24.43
KB
-rw-r--r--
mod_dir.html.ja.utf8
19.66
KB
-rw-r--r--
mod_dir.html.ko.euc-kr
16.53
KB
-rw-r--r--
mod_dir.html.tr.utf8
23.66
KB
-rw-r--r--
mod_dumpio.html
301
B
-rw-r--r--
mod_dumpio.html.en
9.62
KB
-rw-r--r--
mod_dumpio.html.fr.utf8
9.99
KB
-rw-r--r--
mod_dumpio.html.ja.utf8
10.32
KB
-rw-r--r--
mod_echo.html
386
B
-rw-r--r--
mod_echo.html.en
7.44
KB
-rw-r--r--
mod_echo.html.fr.utf8
7.58
KB
-rw-r--r--
mod_echo.html.ja.utf8
7.88
KB
-rw-r--r--
mod_echo.html.ko.euc-kr
7.55
KB
-rw-r--r--
mod_env.html
469
B
-rw-r--r--
mod_env.html.en
11.6
KB
-rw-r--r--
mod_env.html.fr.utf8
12.08
KB
-rw-r--r--
mod_env.html.ja.utf8
11.07
KB
-rw-r--r--
mod_env.html.ko.euc-kr
9.9
KB
-rw-r--r--
mod_env.html.tr.utf8
11.72
KB
-rw-r--r--
mod_example_hooks.html
325
B
-rw-r--r--
mod_example_hooks.html.en
11.2
KB
-rw-r--r--
mod_example_hooks.html.fr.utf8
11.9
KB
-rw-r--r--
mod_example_hooks.html.ko.euc-...
10.76
KB
-rw-r--r--
mod_expires.html
398
B
-rw-r--r--
mod_expires.html.en
16.71
KB
-rw-r--r--
mod_expires.html.fr.utf8
17.81
KB
-rw-r--r--
mod_expires.html.ja.utf8
18.29
KB
-rw-r--r--
mod_expires.html.ko.euc-kr
15.08
KB
-rw-r--r--
mod_ext_filter.html
410
B
-rw-r--r--
mod_ext_filter.html.en
18.22
KB
-rw-r--r--
mod_ext_filter.html.fr.utf8
19.71
KB
-rw-r--r--
mod_ext_filter.html.ja.utf8
22.86
KB
-rw-r--r--
mod_ext_filter.html.ko.euc-kr
18.94
KB
-rw-r--r--
mod_file_cache.html
316
B
-rw-r--r--
mod_file_cache.html.en
15.4
KB
-rw-r--r--
mod_file_cache.html.fr.utf8
17.64
KB
-rw-r--r--
mod_file_cache.html.ko.euc-kr
14.45
KB
-rw-r--r--
mod_filter.html
211
B
-rw-r--r--
mod_filter.html.en
31.22
KB
-rw-r--r--
mod_filter.html.fr.utf8
34.81
KB
-rw-r--r--
mod_headers.html
398
B
-rw-r--r--
mod_headers.html.en
33.85
KB
-rw-r--r--
mod_headers.html.fr.utf8
37.21
KB
-rw-r--r--
mod_headers.html.ja.utf8
25.01
KB
-rw-r--r--
mod_headers.html.ko.euc-kr
19.54
KB
-rw-r--r--
mod_heartbeat.html
217
B
-rw-r--r--
mod_heartbeat.html.en
9.55
KB
-rw-r--r--
mod_heartbeat.html.fr.utf8
9.8
KB
-rw-r--r--
mod_heartmonitor.html
223
B
-rw-r--r--
mod_heartmonitor.html.en
12.12
KB
-rw-r--r--
mod_heartmonitor.html.fr.utf8
12.65
KB
-rw-r--r--
mod_http2.html
209
B
-rw-r--r--
mod_http2.html.en
62.64
KB
-rw-r--r--
mod_http2.html.fr.utf8
66.38
KB
-rw-r--r--
mod_ident.html
390
B
-rw-r--r--
mod_ident.html.en
9.94
KB
-rw-r--r--
mod_ident.html.fr.utf8
10.45
KB
-rw-r--r--
mod_ident.html.ja.utf8
10.88
KB
-rw-r--r--
mod_ident.html.ko.euc-kr
9.47
KB
-rw-r--r--
mod_imagemap.html
310
B
-rw-r--r--
mod_imagemap.html.en
21.22
KB
-rw-r--r--
mod_imagemap.html.fr.utf8
23.4
KB
-rw-r--r--
mod_imagemap.html.ko.euc-kr
19.77
KB
-rw-r--r--
mod_include.html
304
B
-rw-r--r--
mod_include.html.en
59.85
KB
-rw-r--r--
mod_include.html.fr.utf8
65.42
KB
-rw-r--r--
mod_include.html.ja.utf8
55.34
KB
-rw-r--r--
mod_info.html
386
B
-rw-r--r--
mod_info.html.en
14.6
KB
-rw-r--r--
mod_info.html.fr.utf8
15.53
KB
-rw-r--r--
mod_info.html.ja.utf8
15.12
KB
-rw-r--r--
mod_info.html.ko.euc-kr
12.6
KB
-rw-r--r--
mod_isapi.html
301
B
-rw-r--r--
mod_isapi.html.en
23.44
KB
-rw-r--r--
mod_isapi.html.fr.utf8
25.48
KB
-rw-r--r--
mod_isapi.html.ko.euc-kr
21.62
KB
-rw-r--r--
mod_lbmethod_bybusyness.html
237
B
-rw-r--r--
mod_lbmethod_bybusyness.html.e...
7.85
KB
-rw-r--r--
mod_lbmethod_bybusyness.html.f...
8.25
KB
-rw-r--r--
mod_lbmethod_byrequests.html
237
B
-rw-r--r--
mod_lbmethod_byrequests.html.e...
12.55
KB
-rw-r--r--
mod_lbmethod_byrequests.html.f...
13.08
KB
-rw-r--r--
mod_lbmethod_bytraffic.html
235
B
-rw-r--r--
mod_lbmethod_bytraffic.html.en
8.2
KB
-rw-r--r--
mod_lbmethod_bytraffic.html.fr...
8.6
KB
-rw-r--r--
mod_lbmethod_heartbeat.html
235
B
-rw-r--r--
mod_lbmethod_heartbeat.html.en
8.29
KB
-rw-r--r--
mod_lbmethod_heartbeat.html.fr...
8.65
KB
-rw-r--r--
mod_ldap.html
207
B
-rw-r--r--
mod_ldap.html.en
52.54
KB
-rw-r--r--
mod_ldap.html.fr.utf8
57.83
KB
-rw-r--r--
mod_log_config.html
504
B
-rw-r--r--
mod_log_config.html.en
35.48
KB
-rw-r--r--
mod_log_config.html.fr.utf8
37.95
KB
-rw-r--r--
mod_log_config.html.ja.utf8
33.81
KB
-rw-r--r--
mod_log_config.html.ko.euc-kr
25.54
KB
-rw-r--r--
mod_log_config.html.tr.utf8
37.34
KB
-rw-r--r--
mod_log_debug.html
217
B
-rw-r--r--
mod_log_debug.html.en
10.17
KB
-rw-r--r--
mod_log_debug.html.fr.utf8
10.76
KB
-rw-r--r--
mod_log_forensic.html
415
B
-rw-r--r--
mod_log_forensic.html.en
12.76
KB
-rw-r--r--
mod_log_forensic.html.fr.utf8
14.38
KB
-rw-r--r--
mod_log_forensic.html.ja.utf8
14.2
KB
-rw-r--r--
mod_log_forensic.html.tr.utf8
13.26
KB
-rw-r--r--
mod_logio.html
479
B
-rw-r--r--
mod_logio.html.en
10.38
KB
-rw-r--r--
mod_logio.html.fr.utf8
11.02
KB
-rw-r--r--
mod_logio.html.ja.utf8
10.25
KB
-rw-r--r--
mod_logio.html.ko.euc-kr
9.23
KB
-rw-r--r--
mod_logio.html.tr.utf8
10.61
KB
-rw-r--r--
mod_lua.html
205
B
-rw-r--r--
mod_lua.html.en
91.74
KB
-rw-r--r--
mod_lua.html.fr.utf8
101.5
KB
-rw-r--r--
mod_macro.html
209
B
-rw-r--r--
mod_macro.html.en
15.14
KB
-rw-r--r--
mod_macro.html.fr.utf8
16.11
KB
-rw-r--r--
mod_md.html
203
B
-rw-r--r--
mod_md.html.en
95.75
KB
-rw-r--r--
mod_md.html.fr.utf8
103.21
KB
-rw-r--r--
mod_mime.html
295
B
-rw-r--r--
mod_mime.html.en
64.63
KB
-rw-r--r--
mod_mime.html.fr.utf8
70.52
KB
-rw-r--r--
mod_mime.html.ja.utf8
70.58
KB
-rw-r--r--
mod_mime_magic.html
219
B
-rw-r--r--
mod_mime_magic.html.en
16.67
KB
-rw-r--r--
mod_mime_magic.html.fr.utf8
17.74
KB
-rw-r--r--
mod_negotiation.html
316
B
-rw-r--r--
mod_negotiation.html.en
21.36
KB
-rw-r--r--
mod_negotiation.html.fr.utf8
23.09
KB
-rw-r--r--
mod_negotiation.html.ja.utf8
22.53
KB
-rw-r--r--
mod_nw_ssl.html
211
B
-rw-r--r--
mod_nw_ssl.html.en
9.5
KB
-rw-r--r--
mod_nw_ssl.html.fr.utf8
9.8
KB
-rw-r--r--
mod_privileges.html
219
B
-rw-r--r--
mod_privileges.html.en
29.36
KB
-rw-r--r--
mod_privileges.html.fr.utf8
32.73
KB
-rw-r--r--
mod_proxy.html
298
B
-rw-r--r--
mod_proxy.html.en
130.78
KB
-rw-r--r--
mod_proxy.html.fr.utf8
147.41
KB
-rw-r--r--
mod_proxy.html.ja.utf8
92.16
KB
-rw-r--r--
mod_proxy_ajp.html
310
B
-rw-r--r--
mod_proxy_ajp.html.en
32.1
KB
-rw-r--r--
mod_proxy_ajp.html.fr.utf8
35.22
KB
-rw-r--r--
mod_proxy_ajp.html.ja.utf8
32.25
KB
-rw-r--r--
mod_proxy_balancer.html
325
B
-rw-r--r--
mod_proxy_balancer.html.en
22.97
KB
-rw-r--r--
mod_proxy_balancer.html.fr.utf...
25.71
KB
-rw-r--r--
mod_proxy_balancer.html.ja.utf...
18.82
KB
-rw-r--r--
mod_proxy_connect.html
322
B
-rw-r--r--
mod_proxy_connect.html.en
10.05
KB
-rw-r--r--
mod_proxy_connect.html.fr.utf8
10.56
KB
-rw-r--r--
mod_proxy_connect.html.ja.utf8
9.2
KB
-rw-r--r--
mod_proxy_express.html
225
B
-rw-r--r--
mod_proxy_express.html.en
13.41
KB
-rw-r--r--
mod_proxy_express.html.fr.utf8
14.08
KB
-rw-r--r--
mod_proxy_fcgi.html
219
B
-rw-r--r--
mod_proxy_fcgi.html.en
22.3
KB
-rw-r--r--
mod_proxy_fcgi.html.fr.utf8
24.51
KB
-rw-r--r--
mod_proxy_fdpass.html
223
B
-rw-r--r--
mod_proxy_fdpass.html.en
7.49
KB
-rw-r--r--
mod_proxy_fdpass.html.fr.utf8
7.72
KB
-rw-r--r--
mod_proxy_ftp.html
217
B
-rw-r--r--
mod_proxy_ftp.html.en
18.35
KB
-rw-r--r--
mod_proxy_ftp.html.fr.utf8
20.33
KB
-rw-r--r--
mod_proxy_hcheck.html
223
B
-rw-r--r--
mod_proxy_hcheck.html.en
17.56
KB
-rw-r--r--
mod_proxy_hcheck.html.fr.utf8
18.75
KB
-rw-r--r--
mod_proxy_html.html
219
B
-rw-r--r--
mod_proxy_html.html.en
33.61
KB
-rw-r--r--
mod_proxy_html.html.fr.utf8
38.34
KB
-rw-r--r--
mod_proxy_http.html
219
B
-rw-r--r--
mod_proxy_http.html.en
11.82
KB
-rw-r--r--
mod_proxy_http.html.fr.utf8
12.7
KB
-rw-r--r--
mod_proxy_http2.html
221
B
-rw-r--r--
mod_proxy_http2.html.en
10.25
KB
-rw-r--r--
mod_proxy_http2.html.fr.utf8
10.81
KB
-rw-r--r--
mod_proxy_scgi.html
219
B
-rw-r--r--
mod_proxy_scgi.html.en
14.63
KB
-rw-r--r--
mod_proxy_scgi.html.fr.utf8
15.59
KB
-rw-r--r--
mod_proxy_uwsgi.html
221
B
-rw-r--r--
mod_proxy_uwsgi.html.en
8.4
KB
-rw-r--r--
mod_proxy_uwsgi.html.fr.utf8
8.7
KB
-rw-r--r--
mod_proxy_wstunnel.html
227
B
-rw-r--r--
mod_proxy_wstunnel.html.en
11.01
KB
-rw-r--r--
mod_proxy_wstunnel.html.fr.utf...
11.62
KB
-rw-r--r--
mod_ratelimit.html
217
B
-rw-r--r--
mod_ratelimit.html.en
7.05
KB
-rw-r--r--
mod_ratelimit.html.fr.utf8
7.38
KB
-rw-r--r--
mod_reflector.html
217
B
-rw-r--r--
mod_reflector.html.en
8.53
KB
-rw-r--r--
mod_reflector.html.fr.utf8
8.87
KB
-rw-r--r--
mod_remoteip.html
215
B
-rw-r--r--
mod_remoteip.html.en
26.61
KB
-rw-r--r--
mod_remoteip.html.fr.utf8
29.21
KB
-rw-r--r--
mod_reqtimeout.html
219
B
-rw-r--r--
mod_reqtimeout.html.en
12.75
KB
-rw-r--r--
mod_reqtimeout.html.fr.utf8
13.64
KB
-rw-r--r--
mod_request.html
304
B
-rw-r--r--
mod_request.html.en
9.31
KB
-rw-r--r--
mod_request.html.fr.utf8
9.91
KB
-rw-r--r--
mod_request.html.tr.utf8
9.69
KB
-rw-r--r--
mod_rewrite.html
213
B
-rw-r--r--
mod_rewrite.html.en
78.02
KB
-rw-r--r--
mod_rewrite.html.fr.utf8
84.61
KB
-rw-r--r--
mod_sed.html
205
B
-rw-r--r--
mod_sed.html.en
11.67
KB
-rw-r--r--
mod_sed.html.fr.utf8
12.21
KB
-rw-r--r--
mod_session.html
213
B
-rw-r--r--
mod_session.html.en
34.94
KB
-rw-r--r--
mod_session.html.fr.utf8
38.05
KB
-rw-r--r--
mod_session_cookie.html
227
B
-rw-r--r--
mod_session_cookie.html.en
13.71
KB
-rw-r--r--
mod_session_cookie.html.fr.utf...
14.46
KB
-rw-r--r--
mod_session_crypto.html
227
B
-rw-r--r--
mod_session_crypto.html.en
17.87
KB
-rw-r--r--
mod_session_crypto.html.fr.utf...
19.28
KB
-rw-r--r--
mod_session_dbd.html
221
B
-rw-r--r--
mod_session_dbd.html.en
25.07
KB
-rw-r--r--
mod_session_dbd.html.fr.utf8
26.96
KB
-rw-r--r--
mod_setenvif.html
494
B
-rw-r--r--
mod_setenvif.html.en
21.34
KB
-rw-r--r--
mod_setenvif.html.fr.utf8
23.04
KB
-rw-r--r--
mod_setenvif.html.ja.utf8
21.65
KB
-rw-r--r--
mod_setenvif.html.ko.euc-kr
17.41
KB
-rw-r--r--
mod_setenvif.html.tr.utf8
22.17
KB
-rw-r--r--
mod_slotmem_plain.html
225
B
-rw-r--r--
mod_slotmem_plain.html.en
8.1
KB
-rw-r--r--
mod_slotmem_plain.html.fr.utf8
8.45
KB
-rw-r--r--
mod_slotmem_shm.html
221
B
-rw-r--r--
mod_slotmem_shm.html.en
8.7
KB
-rw-r--r--
mod_slotmem_shm.html.fr.utf8
9.1
KB
-rw-r--r--
mod_so.html
464
B
-rw-r--r--
mod_so.html.en
13.66
KB
-rw-r--r--
mod_so.html.fr.utf8
15.09
KB
-rw-r--r--
mod_so.html.ja.utf8
16.29
KB
-rw-r--r--
mod_so.html.ko.euc-kr
12.39
KB
-rw-r--r--
mod_so.html.tr.utf8
15.01
KB
-rw-r--r--
mod_socache_dbm.html
221
B
-rw-r--r--
mod_socache_dbm.html.en
6.16
KB
-rw-r--r--
mod_socache_dbm.html.fr.utf8
6.29
KB
-rw-r--r--
mod_socache_dc.html
219
B
-rw-r--r--
mod_socache_dc.html.en
6.21
KB
-rw-r--r--
mod_socache_dc.html.fr.utf8
6.34
KB
-rw-r--r--
mod_socache_memcache.html
231
B
-rw-r--r--
mod_socache_memcache.html.en
8.65
KB
-rw-r--r--
mod_socache_memcache.html.fr.u...
9.16
KB
-rw-r--r--
mod_socache_redis.html
225
B
-rw-r--r--
mod_socache_redis.html.en
10.27
KB
-rw-r--r--
mod_socache_redis.html.fr.utf8
10.94
KB
-rw-r--r--
mod_socache_shmcb.html
225
B
-rw-r--r--
mod_socache_shmcb.html.en
6.24
KB
-rw-r--r--
mod_socache_shmcb.html.fr.utf8
6.38
KB
-rw-r--r--
mod_speling.html
398
B
-rw-r--r--
mod_speling.html.en
12.86
KB
-rw-r--r--
mod_speling.html.fr.utf8
13.57
KB
-rw-r--r--
mod_speling.html.ja.utf8
14.53
KB
-rw-r--r--
mod_speling.html.ko.euc-kr
11.75
KB
-rw-r--r--
mod_ssl.html
205
B
-rw-r--r--
mod_ssl.html.en
188.2
KB
-rw-r--r--
mod_ssl.html.fr.utf8
207.15
KB
-rw-r--r--
mod_status.html
484
B
-rw-r--r--
mod_status.html.en
11.93
KB
-rw-r--r--
mod_status.html.fr.utf8
12.82
KB
-rw-r--r--
mod_status.html.ja.utf8
11.42
KB
-rw-r--r--
mod_status.html.ko.euc-kr
9.55
KB
-rw-r--r--
mod_status.html.tr.utf8
12.64
KB
-rw-r--r--
mod_substitute.html
219
B
-rw-r--r--
mod_substitute.html.en
14.62
KB
-rw-r--r--
mod_substitute.html.fr.utf8
15.55
KB
-rw-r--r--
mod_suexec.html
484
B
-rw-r--r--
mod_suexec.html.en
8.11
KB
-rw-r--r--
mod_suexec.html.fr.utf8
8.37
KB
-rw-r--r--
mod_suexec.html.ja.utf8
8.93
KB
-rw-r--r--
mod_suexec.html.ko.euc-kr
8.07
KB
-rw-r--r--
mod_suexec.html.tr.utf8
8.32
KB
-rw-r--r--
mod_systemd.html
213
B
-rw-r--r--
mod_systemd.html.en
7.9
KB
-rw-r--r--
mod_systemd.html.fr.utf8
8.11
KB
-rw-r--r--
mod_tls.html
118
B
-rw-r--r--
mod_tls.html.en
42.32
KB
-rw-r--r--
mod_unique_id.html
406
B
-rw-r--r--
mod_unique_id.html.en
15.14
KB
-rw-r--r--
mod_unique_id.html.fr.utf8
17.4
KB
-rw-r--r--
mod_unique_id.html.ja.utf8
18.45
KB
-rw-r--r--
mod_unique_id.html.ko.euc-kr
13.09
KB
-rw-r--r--
mod_unixd.html
298
B
-rw-r--r--
mod_unixd.html.en
13.64
KB
-rw-r--r--
mod_unixd.html.fr.utf8
14.69
KB
-rw-r--r--
mod_unixd.html.tr.utf8
14.34
KB
-rw-r--r--
mod_userdir.html
489
B
-rw-r--r--
mod_userdir.html.en
12.57
KB
-rw-r--r--
mod_userdir.html.fr.utf8
13.71
KB
-rw-r--r--
mod_userdir.html.ja.utf8
13.08
KB
-rw-r--r--
mod_userdir.html.ko.euc-kr
10.79
KB
-rw-r--r--
mod_userdir.html.tr.utf8
13.22
KB
-rw-r--r--
mod_usertrack.html
217
B
-rw-r--r--
mod_usertrack.html.en
19.68
KB
-rw-r--r--
mod_usertrack.html.fr.utf8
20.92
KB
-rw-r--r--
mod_version.html
398
B
-rw-r--r--
mod_version.html.en
10.33
KB
-rw-r--r--
mod_version.html.fr.utf8
10.95
KB
-rw-r--r--
mod_version.html.ja.utf8
10.88
KB
-rw-r--r--
mod_version.html.ko.euc-kr
10.28
KB
-rw-r--r--
mod_vhost_alias.html
316
B
-rw-r--r--
mod_vhost_alias.html.en
20.98
KB
-rw-r--r--
mod_vhost_alias.html.fr.utf8
22.28
KB
-rw-r--r--
mod_vhost_alias.html.tr.utf8
21.5
KB
-rw-r--r--
mod_watchdog.html
215
B
-rw-r--r--
mod_watchdog.html.en
8.03
KB
-rw-r--r--
mod_watchdog.html.fr.utf8
8.31
KB
-rw-r--r--
mod_xml2enc.html
213
B
-rw-r--r--
mod_xml2enc.html.en
15.28
KB
-rw-r--r--
mod_xml2enc.html.fr.utf8
16.78
KB
-rw-r--r--
module-dict.html
489
B
-rw-r--r--
module-dict.html.en
9.22
KB
-rw-r--r--
module-dict.html.fr.utf8
9.48
KB
-rw-r--r--
module-dict.html.ja.utf8
10.29
KB
-rw-r--r--
module-dict.html.ko.euc-kr
8.49
KB
-rw-r--r--
module-dict.html.tr.utf8
9.43
KB
-rw-r--r--
mpm_common.html
481
B
-rw-r--r--
mpm_common.html.de
62.97
KB
-rw-r--r--
mpm_common.html.en
65.24
KB
-rw-r--r--
mpm_common.html.fr.utf8
72.24
KB
-rw-r--r--
mpm_common.html.ja.utf8
66.66
KB
-rw-r--r--
mpm_common.html.tr.utf8
69.86
KB
-rw-r--r--
mpm_netware.html
213
B
-rw-r--r--
mpm_netware.html.en
10.06
KB
-rw-r--r--
mpm_netware.html.fr.utf8
10.58
KB
-rw-r--r--
mpm_winnt.html
387
B
-rw-r--r--
mpm_winnt.html.de
7.99
KB
-rw-r--r--
mpm_winnt.html.en
10.84
KB
-rw-r--r--
mpm_winnt.html.fr.utf8
11.38
KB
-rw-r--r--
mpm_winnt.html.ja.utf8
8.23
KB
-rw-r--r--
mpmt_os2.html
207
B
-rw-r--r--
mpmt_os2.html.en
7.77
KB
-rw-r--r--
mpmt_os2.html.fr.utf8
7.96
KB
-rw-r--r--
overrides.html
209
B
-rw-r--r--
overrides.html.en
68.7
KB
-rw-r--r--
overrides.html.fr.utf8
74.38
KB
-rw-r--r--
prefork.html
466
B
-rw-r--r--
prefork.html.de
16.15
KB
-rw-r--r--
prefork.html.en
16.08
KB
-rw-r--r--
prefork.html.fr.utf8
17.41
KB
-rw-r--r--
prefork.html.ja.utf8
16.98
KB
-rw-r--r--
prefork.html.tr.utf8
16.85
KB
-rw-r--r--
quickreference.html
792
B
-rw-r--r--
quickreference.html.de
192.38
KB
-rw-r--r--
quickreference.html.en
191.44
KB
-rw-r--r--
quickreference.html.es
191.79
KB
-rw-r--r--
quickreference.html.fr.utf8
205.25
KB
-rw-r--r--
quickreference.html.ja.utf8
194.74
KB
-rw-r--r--
quickreference.html.ko.euc-kr
188.53
KB
-rw-r--r--
quickreference.html.tr.utf8
194.31
KB
-rw-r--r--
quickreference.html.zh-cn.utf8
191.3
KB
-rw-r--r--
worker.html
461
B
-rw-r--r--
worker.html.de
15.79
KB
-rw-r--r--
worker.html.en
15.41
KB
-rw-r--r--
worker.html.fr.utf8
16.26
KB
-rw-r--r--
worker.html.ja.utf8
16.62
KB
-rw-r--r--
worker.html.tr.utf8
16.13
KB
-rw-r--r--
Delete
Unzip
Zip
${this.title}
Close
Code Editor : mod_session.html.en
<?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"> <html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en"><head> <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" /> <!-- XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX This file is generated from xml source: DO NOT EDIT XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX --> <title>mod_session - Apache HTTP Server Version 2.4</title> <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" /> <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" /> <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" /> <script src="../style/scripts/prettify.min.js" type="text/javascript"> </script> <link href="../images/favicon.ico" rel="shortcut icon" /></head> <body> <div id="page-header"> <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossary</a> | <a href="../sitemap.html">Sitemap</a></p> <p class="apache">Apache HTTP Server Version 2.4</p> <img alt="" src="../images/feather.png" /></div> <div class="up"><a href="./"><img title="<-" alt="<-" src="../images/left.gif" /></a></div> <div id="path"> <a href="http://www.apache.org/">Apache</a> > <a href="http://httpd.apache.org/">HTTP Server</a> > <a href="http://httpd.apache.org/docs/">Documentation</a> > <a href="../">Version 2.4</a> > <a href="./">Modules</a></div> <div id="page-content"> <div id="preamble"><h1>Apache Module mod_session</h1> <div class="toplang"> <p><span>Available Languages: </span><a href="../en/mod/mod_session.html" title="English"> en </a> | <a href="../fr/mod/mod_session.html" hreflang="fr" rel="alternate" title="Français"> fr </a></p> </div> <table class="module"><tr><th><a href="module-dict.html#Description">Description:</a></th><td>Session support</td></tr> <tr><th><a href="module-dict.html#Status">Status:</a></th><td>Extension</td></tr> <tr><th><a href="module-dict.html#ModuleIdentifier">Module Identifier:</a></th><td>session_module</td></tr> <tr><th><a href="module-dict.html#SourceFile">Source File:</a></th><td>mod_session.c</td></tr> <tr><th><a href="module-dict.html#Compatibility">Compatibility:</a></th><td>Available in Apache 2.3 and later</td></tr></table> <h3>Summary</h3> <div class="warning"><h3>Warning</h3> <p>The session modules make use of HTTP cookies, and as such can fall victim to Cross Site Scripting attacks, or expose potentially private information to clients. Please ensure that the relevant risks have been taken into account before enabling the session functionality on your server.</p> </div> <p>This module provides support for a server wide per user session interface. Sessions can be used for keeping track of whether a user has been logged in, or for other per user information that should be kept available across requests.</p> <p>Sessions may be stored on the server, or may be stored on the browser. Sessions may also be optionally encrypted for added security. These features are divided into several modules in addition to <code class="module"><a href="../mod/mod_session.html">mod_session</a></code>; <code class="module"><a href="../mod/mod_session_crypto.html">mod_session_crypto</a></code>, <code class="module"><a href="../mod/mod_session_cookie.html">mod_session_cookie</a></code> and <code class="module"><a href="../mod/mod_session_dbd.html">mod_session_dbd</a></code>. Depending on the server requirements, load the appropriate modules into the server (either statically at compile time or dynamically via the <code class="directive"><a href="../mod/mod_so.html#loadmodule">LoadModule</a></code> directive).</p> <p>Sessions may be manipulated from other modules that depend on the session, or the session may be read from and written to using environment variables and HTTP headers, as appropriate.</p> </div> <div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><h3>Topics</h3> <ul id="topics"> <li><img alt="" src="../images/down.gif" /> <a href="#whatisasession">What is a session?</a></li> <li><img alt="" src="../images/down.gif" /> <a href="#whocanuseasession">Who can use a session?</a></li> <li><img alt="" src="../images/down.gif" /> <a href="#serversession">Keeping sessions on the server</a></li> <li><img alt="" src="../images/down.gif" /> <a href="#browsersession">Keeping sessions on the browser</a></li> <li><img alt="" src="../images/down.gif" /> <a href="#basicexamples">Basic Examples</a></li> <li><img alt="" src="../images/down.gif" /> <a href="#sessionprivacy">Session Privacy</a></li> <li><img alt="" src="../images/down.gif" /> <a href="#cookieprivacy">Cookie Privacy</a></li> <li><img alt="" src="../images/down.gif" /> <a href="#authentication">Session Support for Authentication</a></li> <li><img alt="" src="../images/down.gif" /> <a href="#integration">Integrating Sessions with External Applications</a></li> </ul><h3 class="directives">Directives</h3> <ul id="toc"> <li><img alt="" src="../images/down.gif" /> <a href="#session">Session</a></li> <li><img alt="" src="../images/down.gif" /> <a href="#sessionenv">SessionEnv</a></li> <li><img alt="" src="../images/down.gif" /> <a href="#sessionexclude">SessionExclude</a></li> <li><img alt="" src="../images/down.gif" /> <a href="#sessionexpiryupdateinterval">SessionExpiryUpdateInterval</a></li> <li><img alt="" src="../images/down.gif" /> <a href="#sessionheader">SessionHeader</a></li> <li><img alt="" src="../images/down.gif" /> <a href="#sessioninclude">SessionInclude</a></li> <li><img alt="" src="../images/down.gif" /> <a href="#sessionmaxage">SessionMaxAge</a></li> </ul> <h3>Bugfix checklist</h3><ul class="seealso"><li><a href="https://www.apache.org/dist/httpd/CHANGES_2.4">httpd changelog</a></li><li><a href="https://bz.apache.org/bugzilla/buglist.cgi?bug_status=__open__&list_id=144532&product=Apache%20httpd-2&query_format=specific&order=changeddate%20DESC%2Cpriority%2Cbug_severity&component=mod_session">Known issues</a></li><li><a href="https://bz.apache.org/bugzilla/enter_bug.cgi?product=Apache%20httpd-2&component=mod_session">Report a bug</a></li></ul><h3>See also</h3> <ul class="seealso"> <li><code class="module"><a href="../mod/mod_session_cookie.html">mod_session_cookie</a></code></li> <li><code class="module"><a href="../mod/mod_session_crypto.html">mod_session_crypto</a></code></li> <li><code class="module"><a href="../mod/mod_session_dbd.html">mod_session_dbd</a></code></li> <li><a href="#comments_section">Comments</a></li></ul></div> <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div> <div class="section"> <h2><a name="whatisasession" id="whatisasession">What is a session?</a></h2> <p>At the core of the session interface is a table of key and value pairs that are made accessible across browser requests. These pairs can be set to any valid string, as needed by the application making use of the session.</p> <p>The "session" is a <strong>application/x-www-form-urlencoded</strong> string containing these key value pairs, as defined by the <a href="http://www.w3.org/TR/html4/">HTML specification</a>.</p> <p>The session can optionally be encrypted and base64 encoded before being written to the storage mechanism, as defined by the administrator.</p> </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div> <div class="section"> <h2><a name="whocanuseasession" id="whocanuseasession">Who can use a session?</a></h2> <p>The session interface is primarily developed for the use by other server modules, such as <code class="module"><a href="../mod/mod_auth_form.html">mod_auth_form</a></code>, however CGI based applications can optionally be granted access to the contents of the session via the HTTP_SESSION environment variable. Sessions have the option to be modified and/or updated by inserting an HTTP response header containing the new session parameters.</p> </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div> <div class="section"> <h2><a name="serversession" id="serversession">Keeping sessions on the server</a></h2> <p>Apache can be configured to keep track of per user sessions stored on a particular server or group of servers. This functionality is similar to the sessions available in typical application servers.</p> <p>If configured, sessions are tracked through the use of a session ID that is stored inside a cookie, or extracted from the parameters embedded within the URL query string, as found in a typical GET request.</p> <p>As the contents of the session are stored exclusively on the server, there is an expectation of privacy of the contents of the session. This does have performance and resource implications should a large number of sessions be present, or where a large number of webservers have to share sessions with one another.</p> <p>The <code class="module"><a href="../mod/mod_session_dbd.html">mod_session_dbd</a></code> module allows the storage of user sessions within a SQL database via <code class="module"><a href="../mod/mod_dbd.html">mod_dbd</a></code>.</p> </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div> <div class="section"> <h2><a name="browsersession" id="browsersession">Keeping sessions on the browser</a></h2> <p>In high traffic environments where keeping track of a session on a server is too resource intensive or inconvenient, the option exists to store the contents of the session within a cookie on the client browser instead.</p> <p>This has the advantage that minimal resources are required on the server to keep track of sessions, and multiple servers within a server farm have no need to share session information.</p> <p>The contents of the session however are exposed to the client, with a corresponding risk of a loss of privacy. The <code class="module"><a href="../mod/mod_session_crypto.html">mod_session_crypto</a></code> module can be configured to encrypt the contents of the session before writing the session to the client.</p> <p>The <code class="module"><a href="../mod/mod_session_cookie.html">mod_session_cookie</a></code> allows the storage of user sessions on the browser within an HTTP cookie.</p> </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div> <div class="section"> <h2><a name="basicexamples" id="basicexamples">Basic Examples</a></h2> <p>Creating a session is as simple as turning the session on, and deciding where the session will be stored. In this example, the session will be stored on the browser, in a cookie called <code>session</code>.</p> <div class="example"><h3>Browser based session</h3><pre class="prettyprint lang-config">Session On SessionCookieName session path=/</pre> </div> <p>The session is not useful unless it can be written to or read from. The following example shows how values can be injected into the session through the use of a predetermined HTTP response header called <code>X-Replace-Session</code>.</p> <div class="example"><h3>Writing to a session</h3><pre class="prettyprint lang-config">Session On SessionCookieName session path=/ SessionHeader X-Replace-Session</pre> </div> <p>The header should contain name value pairs expressed in the same format as a query string in a URL, as in the example below. Setting a key to the empty string has the effect of removing that key from the session.</p> <div class="example"><h3>CGI to write to a session</h3><pre class="prettyprint lang-sh">#!/bin/bash echo "Content-Type: text/plain" echo "X-Replace-Session: key1=foo&key2=&key3=bar" echo env</pre> </div> <p>If configured, the session can be read back from the HTTP_SESSION environment variable. By default, the session is kept private, so this has to be explicitly turned on with the <code class="directive"><a href="#sessionenv">SessionEnv</a></code> directive.</p> <div class="example"><h3>Read from a session</h3><pre class="prettyprint lang-config">Session On SessionEnv On SessionCookieName session path=/ SessionHeader X-Replace-Session</pre> </div> <p>Once read, the CGI variable <code>HTTP_SESSION</code> should contain the value <code>key1=foo&key3=bar</code>.</p> </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div> <div class="section"> <h2><a name="sessionprivacy" id="sessionprivacy">Session Privacy</a></h2> <p>Using the "show cookies" feature of your browser, you would have seen a clear text representation of the session. This could potentially be a problem should the end user need to be kept unaware of the contents of the session, or where a third party could gain unauthorised access to the data within the session.</p> <p>The contents of the session can be optionally encrypted before being placed on the browser using the <code class="module"><a href="../mod/mod_session_crypto.html">mod_session_crypto</a></code> module.</p> <div class="example"><h3>Browser based encrypted session</h3><pre class="prettyprint lang-config">Session On SessionCryptoPassphrase secret SessionCookieName session path=/</pre> </div> <p>The session will be automatically decrypted on load, and encrypted on save by Apache, the underlying application using the session need have no knowledge that encryption is taking place.</p> <p>Sessions stored on the server rather than on the browser can also be encrypted as needed, offering privacy where potentially sensitive information is being shared between webservers in a server farm using the <code class="module"><a href="../mod/mod_session_dbd.html">mod_session_dbd</a></code> module.</p> </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div> <div class="section"> <h2><a name="cookieprivacy" id="cookieprivacy">Cookie Privacy</a></h2> <p>The HTTP cookie mechanism also offers privacy features, such as the ability to restrict cookie transport to SSL protected pages only, or to prevent browser based javascript from gaining access to the contents of the cookie.</p> <div class="warning"><h3>Warning</h3> <p>Some of the HTTP cookie privacy features are either non-standard, or are not implemented consistently across browsers. The session modules allow you to set cookie parameters, but it makes no guarantee that privacy will be respected by the browser. If security is a concern, use the <code class="module"><a href="../mod/mod_session_crypto.html">mod_session_crypto</a></code> to encrypt the contents of the session, or store the session on the server using the <code class="module"><a href="../mod/mod_session_dbd.html">mod_session_dbd</a></code> module.</p> </div> <p>Standard cookie parameters can be specified after the name of the cookie, as in the example below.</p> <div class="example"><h3>Setting cookie parameters</h3><pre class="prettyprint lang-config">Session On SessionCryptoPassphrase secret SessionCookieName session path=/private;domain=example.com;httponly;secure;</pre> </div> <p>In cases where the Apache server forms the frontend for backend origin servers, it is possible to have the session cookies removed from the incoming HTTP headers using the <code class="directive"><a href="../mod/mod_session_cookie.html#sessioncookieremove">SessionCookieRemove</a></code> directive. This keeps the contents of the session cookies from becoming accessible from the backend server. </p> </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div> <div class="section"> <h2><a name="authentication" id="authentication">Session Support for Authentication</a></h2> <p>As is possible within many application servers, authentication modules can use a session for storing the username and password after login. The <code class="module"><a href="../mod/mod_auth_form.html">mod_auth_form</a></code> saves the user's login name and password within the session.</p> <div class="example"><h3>Form based authentication</h3><pre class="prettyprint lang-config">Session On SessionCryptoPassphrase secret SessionCookieName session path=/ AuthFormProvider file AuthUserFile "conf/passwd" AuthType form AuthName "realm" #...</pre> </div> <p>See the <code class="module"><a href="../mod/mod_auth_form.html">mod_auth_form</a></code> module for documentation and complete examples.</p> </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div> <div class="section"> <h2><a name="integration" id="integration">Integrating Sessions with External Applications</a></h2> <p>In order for sessions to be useful, it must be possible to share the contents of a session with external applications, and it must be possible for an external application to write a session of its own.</p> <p> A typical example might be an application that changes a user's password set by <code class="module"><a href="../mod/mod_auth_form.html">mod_auth_form</a></code>. This application would need to read the current username and password from the session, make the required changes to the user's password, and then write the new password to the session in order to provide a seamless transition to the new password.</p> <p>A second example might involve an application that registers a new user for the first time. When registration is complete, the username and password is written to the session, providing a seamless transition to being logged in.</p> <dl> <dt>Apache modules</dt> <dd>Modules within the server that need access to the session can use the <strong>mod_session.h</strong> API in order to read from and write to the session. This mechanism is used by modules like <code class="module"><a href="../mod/mod_auth_form.html">mod_auth_form</a></code>. </dd> <dt>CGI programs and scripting languages</dt> <dd>Applications that run within the webserver can optionally retrieve the value of the session from the <strong>HTTP_SESSION</strong> environment variable. The session should be encoded as a <strong>application/x-www-form-urlencoded</strong> string as described by the <a href="http://www.w3.org/TR/html4/">HTML specification</a>. The environment variable is controlled by the setting of the <code class="directive"><a href="#sessionenv">SessionEnv</a></code> directive. The session can be written to by the script by returning a <strong>application/x-www-form-urlencoded</strong> response header with a name set by the <code class="directive"><a href="#sessionheader">SessionHeader</a></code> directive. In both cases, any encryption or decryption, and the reading the session from or writing the session to the chosen storage mechanism is handled by the <code class="module"><a href="../mod/mod_session.html">mod_session</a></code> modules and corresponding configuration. </dd> <dt>Applications behind <code class="module"><a href="../mod/mod_proxy.html">mod_proxy</a></code></dt> <dd>If the <code class="directive"><a href="#sessionheader">SessionHeader</a></code> directive is used to define an HTTP request header, the session, encoded as a <strong>application/x-www-form-urlencoded</strong> string, will be made available to the application. If the same header is provided in the response, the value of this response header will be used to replace the session. As above, any encryption or decryption, and the reading the session from or writing the session to the chosen storage mechanism is handled by the <code class="module"><a href="../mod/mod_session.html">mod_session</a></code> modules and corresponding configuration.</dd> <dt>Standalone applications</dt> <dd>Applications might choose to manipulate the session outside the control of the Apache HTTP server. In this case, it is the responsibility of the application to read the session from the chosen storage mechanism, decrypt the session, update the session, encrypt the session and write the session to the chosen storage mechanism, as appropriate.</dd> </dl> </div> <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div> <div class="directive-section"><h2><a name="Session" id="Session">Session</a> <a name="session" id="session">Directive</a></h2> <table class="directive"> <tr><th><a href="directive-dict.html#Description">Description:</a></th><td>Enables a session for the current directory or location</td></tr> <tr><th><a href="directive-dict.html#Syntax">Syntax:</a></th><td><code>Session On|Off</code></td></tr> <tr><th><a href="directive-dict.html#Default">Default:</a></th><td><code>Session Off</code></td></tr> <tr><th><a href="directive-dict.html#Context">Context:</a></th><td>server config, virtual host, directory, .htaccess</td></tr> <tr><th><a href="directive-dict.html#Override">Override:</a></th><td>AuthConfig</td></tr> <tr><th><a href="directive-dict.html#Status">Status:</a></th><td>Extension</td></tr> <tr><th><a href="directive-dict.html#Module">Module:</a></th><td>mod_session</td></tr> </table> <p>The <code class="directive">Session</code> directive enables a session for the directory or location container. Further directives control where the session will be stored and how privacy is maintained.</p> </div> <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div> <div class="directive-section"><h2><a name="SessionEnv" id="SessionEnv">SessionEnv</a> <a name="sessionenv" id="sessionenv">Directive</a></h2> <table class="directive"> <tr><th><a href="directive-dict.html#Description">Description:</a></th><td>Control whether the contents of the session are written to the <var>HTTP_SESSION</var> environment variable</td></tr> <tr><th><a href="directive-dict.html#Syntax">Syntax:</a></th><td><code>SessionEnv On|Off</code></td></tr> <tr><th><a href="directive-dict.html#Default">Default:</a></th><td><code>SessionEnv Off</code></td></tr> <tr><th><a href="directive-dict.html#Context">Context:</a></th><td>server config, virtual host, directory, .htaccess</td></tr> <tr><th><a href="directive-dict.html#Override">Override:</a></th><td>AuthConfig</td></tr> <tr><th><a href="directive-dict.html#Status">Status:</a></th><td>Extension</td></tr> <tr><th><a href="directive-dict.html#Module">Module:</a></th><td>mod_session</td></tr> </table> <p>If set to <var>On</var>, the <code class="directive">SessionEnv</code> directive causes the contents of the session to be written to a CGI environment variable called <var>HTTP_SESSION</var>.</p> <p>The string is written in the URL query format, for example:</p> <div class="example"><p><code> <code>key1=foo&key3=bar</code> </code></p></div> </div> <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div> <div class="directive-section"><h2><a name="SessionExclude" id="SessionExclude">SessionExclude</a> <a name="sessionexclude" id="sessionexclude">Directive</a></h2> <table class="directive"> <tr><th><a href="directive-dict.html#Description">Description:</a></th><td>Define URL prefixes for which a session is ignored</td></tr> <tr><th><a href="directive-dict.html#Syntax">Syntax:</a></th><td><code>SessionExclude <var>path</var></code></td></tr> <tr><th><a href="directive-dict.html#Default">Default:</a></th><td><code>none</code></td></tr> <tr><th><a href="directive-dict.html#Context">Context:</a></th><td>server config, virtual host, directory, .htaccess</td></tr> <tr><th><a href="directive-dict.html#Status">Status:</a></th><td>Extension</td></tr> <tr><th><a href="directive-dict.html#Module">Module:</a></th><td>mod_session</td></tr> </table> <p>The <code class="directive">SessionExclude</code> directive allows sessions to be disabled relative to URL prefixes only. This can be used to make a website more efficient, by targeting a more precise URL space for which a session should be maintained. By default, all URLs within the directory or location are included in the session. The <code class="directive"><a href="#sessionexclude">SessionExclude</a></code> directive takes precedence over the <code class="directive"><a href="#sessioninclude">SessionInclude</a></code> directive.</p> <div class="warning"><h3>Warning</h3> <p>This directive has a similar purpose to the <var>path</var> attribute in HTTP cookies, but should not be confused with this attribute. This directive does not set the <var>path</var> attribute, which must be configured separately.</p></div> </div> <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div> <div class="directive-section"><h2><a name="SessionExpiryUpdateInterval" id="SessionExpiryUpdateInterval">SessionExpiryUpdateInterval</a> <a name="sessionexpiryupdateinterval" id="sessionexpiryupdateinterval">Directive</a></h2> <table class="directive"> <tr><th><a href="directive-dict.html#Description">Description:</a></th><td>Define the number of seconds a session's expiry may change without the session being updated</td></tr> <tr><th><a href="directive-dict.html#Syntax">Syntax:</a></th><td><code>SessionExpiryUpdateInterval <var>interval</var></code></td></tr> <tr><th><a href="directive-dict.html#Default">Default:</a></th><td><code>SessionExpiryUpdateInterval 0 (always update)</code></td></tr> <tr><th><a href="directive-dict.html#Context">Context:</a></th><td>server config, virtual host, directory, .htaccess</td></tr> <tr><th><a href="directive-dict.html#Status">Status:</a></th><td>Extension</td></tr> <tr><th><a href="directive-dict.html#Module">Module:</a></th><td>mod_session</td></tr> <tr><th><a href="directive-dict.html#Compatibility">Compatibility:</a></th><td>Available in Apache 2.4.41 and later</td></tr> </table> <p>The <code class="directive">SessionExpiryUpdateInterval</code> directive allows sessions to avoid the cost associated with writing the session each request when only the expiry time has changed. This can be used to make a website more efficient or reduce load on a database when using <code class="module"><a href="../mod/mod_session_dbd.html">mod_session_dbd</a></code>. The session is always written if the data stored in the session has changed or the expiry has changed by more than the configured interval.</p> <p>Setting the interval to zero disables this directive, and the session expiry is refreshed for each request.</p> <p>This directive only has an effect when combined with <code class="directive"><a href="#sessionmaxage">SessionMaxAge</a></code> to enable session expiry. Sessions without an expiry are only written when the data stored in the session has changed.</p> <div class="warning"><h3>Warning</h3> <p>Because the session expiry may not be refreshed with each request, it's possible for sessions to expire up to <var>interval</var> seconds early. Using a small interval usually provides sufficient savings while having a minimal effect on expiry resolution.</p></div> </div> <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div> <div class="directive-section"><h2><a name="SessionHeader" id="SessionHeader">SessionHeader</a> <a name="sessionheader" id="sessionheader">Directive</a></h2> <table class="directive"> <tr><th><a href="directive-dict.html#Description">Description:</a></th><td>Import session updates from a given HTTP response header</td></tr> <tr><th><a href="directive-dict.html#Syntax">Syntax:</a></th><td><code>SessionHeader <var>header</var></code></td></tr> <tr><th><a href="directive-dict.html#Default">Default:</a></th><td><code>none</code></td></tr> <tr><th><a href="directive-dict.html#Context">Context:</a></th><td>server config, virtual host, directory, .htaccess</td></tr> <tr><th><a href="directive-dict.html#Override">Override:</a></th><td>AuthConfig</td></tr> <tr><th><a href="directive-dict.html#Status">Status:</a></th><td>Extension</td></tr> <tr><th><a href="directive-dict.html#Module">Module:</a></th><td>mod_session</td></tr> </table> <p>The <code class="directive">SessionHeader</code> directive defines the name of an HTTP response header which, if present, will be parsed and written to the current session.</p> <p>The header value is expected to be in the URL query format, for example:</p> <div class="example"><p><code> <code>key1=foo&key2=&key3=bar</code> </code></p></div> <p>Where a key is set to the empty string, that key will be removed from the session.</p> </div> <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div> <div class="directive-section"><h2><a name="SessionInclude" id="SessionInclude">SessionInclude</a> <a name="sessioninclude" id="sessioninclude">Directive</a></h2> <table class="directive"> <tr><th><a href="directive-dict.html#Description">Description:</a></th><td>Define URL prefixes for which a session is valid</td></tr> <tr><th><a href="directive-dict.html#Syntax">Syntax:</a></th><td><code>SessionInclude <var>path</var></code></td></tr> <tr><th><a href="directive-dict.html#Default">Default:</a></th><td><code>all URLs</code></td></tr> <tr><th><a href="directive-dict.html#Context">Context:</a></th><td>server config, virtual host, directory, .htaccess</td></tr> <tr><th><a href="directive-dict.html#Override">Override:</a></th><td>AuthConfig</td></tr> <tr><th><a href="directive-dict.html#Status">Status:</a></th><td>Extension</td></tr> <tr><th><a href="directive-dict.html#Module">Module:</a></th><td>mod_session</td></tr> </table> <p>The <code class="directive">SessionInclude</code> directive allows sessions to be made valid for specific URL prefixes only. This can be used to make a website more efficient, by targeting a more precise URL space for which a session should be maintained. By default, all URLs within the directory or location are included in the session.</p> <div class="warning"><h3>Warning</h3> <p>This directive has a similar purpose to the <var>path</var> attribute in HTTP cookies, but should not be confused with this attribute. This directive does not set the <var>path</var> attribute, which must be configured separately.</p></div> </div> <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div> <div class="directive-section"><h2><a name="SessionMaxAge" id="SessionMaxAge">SessionMaxAge</a> <a name="sessionmaxage" id="sessionmaxage">Directive</a></h2> <table class="directive"> <tr><th><a href="directive-dict.html#Description">Description:</a></th><td>Define a maximum age in seconds for a session</td></tr> <tr><th><a href="directive-dict.html#Syntax">Syntax:</a></th><td><code>SessionMaxAge <var>maxage</var></code></td></tr> <tr><th><a href="directive-dict.html#Default">Default:</a></th><td><code>SessionMaxAge 0</code></td></tr> <tr><th><a href="directive-dict.html#Context">Context:</a></th><td>server config, virtual host, directory, .htaccess</td></tr> <tr><th><a href="directive-dict.html#Override">Override:</a></th><td>AuthConfig</td></tr> <tr><th><a href="directive-dict.html#Status">Status:</a></th><td>Extension</td></tr> <tr><th><a href="directive-dict.html#Module">Module:</a></th><td>mod_session</td></tr> </table> <p>The <code class="directive">SessionMaxAge</code> directive defines a time limit for which a session will remain valid. When a session is saved, this time limit is reset and an existing session can be continued. If a session becomes older than this limit without a request to the server to refresh the session, the session will time out and be removed. Where a session is used to stored user login details, this has the effect of logging the user out automatically after the given time.</p> <p>Setting the maxage to zero disables session expiry.</p> </div> </div> <div class="bottomlang"> <p><span>Available Languages: </span><a href="../en/mod/mod_session.html" title="English"> en </a> | <a href="../fr/mod/mod_session.html" hreflang="fr" rel="alternate" title="Français"> fr </a></p> </div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Libera.chat, or sent to our <a href="https://httpd.apache.org/lists.html">mailing lists</a>.</div> <script type="text/javascript"><!--//--><![CDATA[//><!-- var comments_shortname = 'httpd'; var comments_identifier = 'http://httpd.apache.org/docs/2.4/mod/mod_session.html'; (function(w, d) { if (w.location.hostname.toLowerCase() == "httpd.apache.org") { d.write('<div id="comments_thread"><\/div>'); var s = d.createElement('script'); s.type = 'text/javascript'; s.async = true; s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier; (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s); } else { d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>'); } })(window, document); //--><!]]></script></div><div id="footer"> <p class="apache">Copyright 2023 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p> <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossary</a> | <a href="../sitemap.html">Sitemap</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!-- if (typeof(prettyPrint) !== 'undefined') { prettyPrint(); } //--><!]]></script> </body></html>
Close