KeyFocus - KFWS Support
 
 
 

KF Web Server Frequently Asked Questions

What Questions

  • What is the format of the log files and can I use a log analysis application?

  • What CGI programs and languages are supported?

  • What are the security restrictions on the CGI interface?

  • What support is there for Microsoft Front Page Extensions?

  • What support is there for Server Side Includes SSI?




  • Questions & Answers


    What Questions

    What is the format of the log files and can I use a log analysis application?

    We support the two industry standard log file formats, NCSA and W3C. You can use one of the many web server log analysis applications to give you detailed statistics on who has been looking at your site. The log files are in plain ASCII text and so can also be viewed in any text editor.

    By default the log files are written into a sub-directory called logs, located where you installed the server.
    Each web site is given its own log file named after the web site name. The system.log contains additional information such as when the server was started and various error messages.

    There are several configuration options available which affect the log files, these can be found under the "Server -> Logging" menu.

    1) Log Path:
    The path in which the server logs will be created. A relative path will be to the Server Root Leave blank to accept the default.

    2) Log Level:
    Select how much information the server should record in the log file. If it is set to "Notice" or above it will have the affect of turning of the logging of request making the server run slightly faster.

    3) Separate Log Files:
    If selected then each web site is given its own individual log file. If not selected then all requests are logged to a common log file.

    4) Enable Reverse Lookups:
    If selected the server will attempt to look up users' domain names from their IP address to make the log file more informative.
    Enabling this option will lead to a small reduction in your servers performance and will require a connection to a DNS server.

    5) Use GMT:
    Leave this option unchecked to set the time-stamp of each entry to your local time.
    Some log analysis programs expect the time to be set to Greenwich Mean Time. If this is the case then select this option.

    6) Log Format:
    This option controls the format of the request log file.
    The W3C format is newer and superior to the NCSA format, in that its contents can be configured. It also contains a header that describes exactly what is being logged making life easier for your log analysis application.

    If you change the log format or the format settings described below then you should delete or move the old log files to prevent a mix of formats in the same log file, that will confuse your log analysis application.

    7) W3C Format Options:
    If the Log Format is set to W3C, then the log file can be configured by including or excluding these options.
    These options are described as part of the W3C standard which can be found on the W3C web site.

    8) Log Debug Info:
    If this is set extra information is written to the system log file. This information can help resolve configuration issues. Only turn this option on if you are having problems as it will degrade the server's performance slightly.


    What CGI programs and languages are supported?

    KF Web Server supports the standard CGI/1.1 interface.
    This means it works well with most CGI enable languages and we are constantly looking to improve our support for different languages.

    The following list have all been tested with KF Web Server

    • PHP
    • PERL
    • Python
    • ASP

    What are the security restrictions on the CGI interface?

    CGI enables programs to be run every time a user access a page. This enables you to make dynamic web sites which may use a database.

    CGI has been the source of most security weaknesses in web servers over the recent years, as it can potentially let a malicious user run any program on your machine. For example, the Nimda Worm uses the following request to examine the system files on you hard disk.
    /scripts/..%255c../winnt/system32/cmd.exe?/c+dir

    For this reason KF Web Server restrict what executables can be run in this way.
    CGI is enabled only through the setting up of special CGI Filters. These filters call only configured CGI programs and pass them script files to execute, only after checking the security permission of the script file.

    It is


    What support is there for Microsoft Front Page Extensions?

    KF Web Server does not support Microsoft Front Page Extensions.

    Microsoft Front Page Extensions provide the ability to edit a web site from a remote computer. Most users of KF Web Server have complete control over their own server and so it is not nessasary to use this feature in order to use Microsoft Front page to build a web site with KF Web Server.

    Due to the large number of security vulnerabilities relating to Microsoft Front Page Extensions it is unlikely that we will add support for them in the future.


    What support is there for Server Side Includes SSI?

    KF Web Server does not support SSI.

    There are several alternatives to SSI, which are more powerful.
    We recomend PHP as the best alternative, it can do everything that SSI can do and is just as easy to use.