... Server Side Includes . ... Protect Server Files by Default . Some hints and tips on security issues in setting up a web server. ... In typical operation, Apache is started by the root user, and it switches to the user defined by the User directive to serve hits. ... If the logs directory is writeable (by a non-root user), someone could replace a log file with a symlink to some other system file, and then root might overwrite that file with arbitrary data. ... Accessing http://localhost/~root/ . ...