Hiawatha 6.16

Hiawatha 6.16 brings users a highly secure web server for Unix. It has been written with 'being secure' as its main goal. Hiawatha has lots of features that no other web server has. This and the fact that Hiawatha's source code is free of security-bugs, makes Hiawatha the most secure web server available.

Hiawatha has been tested and runs perfectly on Linux, FreeBSD, MacOS X and Cygwin.

Major Features:

1.  Access/connection control
2. Banning
3. CGI support (including PHP)
4. CGI wrapper (run CGI under a diffrerent uid/gid in a secure way)
5. Chunked Transfer-encoding
6. CommandChannel (control Hiawatha by telnetting to a special port)
7. Cookie support
8. Cross-site Scripting (XSS) prevention
9. Cross-site Request Forgery (CSRF) prevention
10. Customizable ServerString
11. Directory listing with customizable stylesheet
12. DoS/flooding protection
13. FastCGI support (load-balanced)
14. GZip Content-Encoding support
15. HTTP authentication (basic and digest)
16. If-(Un)Modified-Since header field
17. Interface binding control
18. Internal file caching
19. IPv6 support
20. Keep-alive connections
21. Large file support
22. Logging
23. Request pipelining
24. Range header field (single range support)
25. Referer control for images (prevent external image linking)
26. Rootjail
27. SSL support
28. SQL injection prevention
29. Traffic throttling/shaping (control uploadspeed)
30. URL rewriting via regular expressions
31. Userdirectory support
32. Virtual host support
33. Volatile object support (for frequently changing objects, like webcam pictures)
34. XSLT support

• Main configuration file httpd.conf renamed to hiawatha.conf.
• Improved error detecting and logging in php-fcgi.
• RunOnDownload option added.
• Small bugfixes and improvements.
• Bugfix: repeated PIDs in php-fcgi.pid with multiple servers.
• Bugfix: incorrect extended log format.
• Bugfix: crash on too long StartFile in .hiawatha file.