CentOS7 安装最新版本号 awstats ,在httpd.conf 中增加了alias,能够直接訪问网址就进入 浏览。十分不安全。
给訪问加上password的方法:
[root@localhost wwwroot]# htpasswd -bc /home/awstats/wwwroot/.htpasswd aaa 123456 [root@localhost wwwroot]# nano /etc/httpd/conf/httpd.conf #改动 Apache 配置文件。给awstats 加上限制: Alias /awstatscss "/home/awstats/wwwroot/css/" Alias /awstatsicons "/home/awstats/wwwroot/icon/" ScriptAlias /awstats/ "/home/awstats/wwwroot/cgi-bin/" # # This is to permit URL access to scripts/files in AWStats directory. # <Directory "/home/awstats/wwwroot"> Options None AllowOverride None AuthName "Members Only" AuthType basic AuthUserFile /home/awstats/wwwroot/.htpasswd require valid-user #Require all granted </Directory>
在又一次訪问 http://www.zbphp.com/awstats/awstats.pl 会出现须要输入password的提示(by default7#zbphp.com):