8 Replies - 3034 Views - Last Post: 11 May 2013 - 01:49 PM

#1 RuneChart  Icon User is offline

  • New D.I.C Head

Reputation: 2
  • View blog
  • Posts: 31
  • Joined: 13-July 11

Places where apache servers log website user activity?

Posted 10 May 2013 - 01:12 AM

I've been working on a php project for a client who's very concerned about customer confidentiality. He's determined that no records of any visits to the website be kept. This isn't my area of expertise, so I thought I'd ask around and see if anyone could tell me where these sorts of logs are kept.

We're using apache with DirectAdmin on a CentOS server. Thanks in advance.
Is This A Good Question/Topic? 0
  • +

Replies To: Places where apache servers log website user activity?

#2 modi123_1  Icon User is offline

  • Suitor #2
  • member icon



Reputation: 9090
  • View blog
  • Posts: 34,142
  • Joined: 12-June 08

Re: Places where apache servers log website user activity?

Posted 10 May 2013 - 05:59 AM

A quick hit of 'no logging in apache' turned up a few links.. just a few. ;)

https://commons.apac...ging/guide.html
https://commons.apac...ommons-logging/
https://httpd.apache...s/1.3/logs.html
https://httpd.apache...s/2.2/logs.html
http://www.howtoforg...etenvif_apache2
http://www.mydigital...-and-error-log/
Was This Post Helpful? 0
  • +
  • -

#3 no2pencil  Icon User is offline

  • Toubabo Koomi
  • member icon

Reputation: 5247
  • View blog
  • Posts: 27,068
  • Joined: 10-May 07

Re: Places where apache servers log website user activity?

Posted 10 May 2013 - 06:05 AM

The logging is handled in httpd.conf. Depending on if this is a single host or a vhost, you should just remove the access_log file as an option & restart the service.
Was This Post Helpful? 0
  • +
  • -

#4 RuneChart  Icon User is offline

  • New D.I.C Head

Reputation: 2
  • View blog
  • Posts: 31
  • Joined: 13-July 11

Re: Places where apache servers log website user activity?

Posted 10 May 2013 - 02:05 PM

Thanks for the help.

It's a vps.

So, aside from apache, does the OS keep any kinds of logs?
Was This Post Helpful? 0
  • +
  • -

#5 modi123_1  Icon User is offline

  • Suitor #2
  • member icon



Reputation: 9090
  • View blog
  • Posts: 34,142
  • Joined: 12-June 08

Re: Places where apache servers log website user activity?

Posted 10 May 2013 - 02:08 PM

You need to search that with your hosting company.
Was This Post Helpful? 0
  • +
  • -

#6 RuneChart  Icon User is offline

  • New D.I.C Head

Reputation: 2
  • View blog
  • Posts: 31
  • Joined: 13-July 11

Re: Places where apache servers log website user activity?

Posted 10 May 2013 - 02:36 PM

Like I said, it's a VPS. We control the operating system.
Was This Post Helpful? 0
  • +
  • -

#7 modi123_1  Icon User is offline

  • Suitor #2
  • member icon



Reputation: 9090
  • View blog
  • Posts: 34,142
  • Joined: 12-June 08

Re: Places where apache servers log website user activity?

Posted 10 May 2013 - 02:41 PM

... and there's a lot of ways a hosting company, for the VPS, could set it up and log the activity. Since all that is forthcoming for what the setup is about would be the apache part it is sort of like trying to throw knives in the dark.
Was This Post Helpful? 0
  • +
  • -

#8 no2pencil  Icon User is offline

  • Toubabo Koomi
  • member icon

Reputation: 5247
  • View blog
  • Posts: 27,068
  • Joined: 10-May 07

Re: Places where apache servers log website user activity?

Posted 10 May 2013 - 07:33 PM

No. The os is outside of the scope of 'web users' as they authenticate with the software. Apache is outside of the scope of 'web users' as it serves websites & logs usage only as far as pages requested, success, & errors. Any other logging is the responsibility of the web application written, which we would have no knowledge of to properly answer the question.

The OS is the communication between the hardware, the webserver binds the port & delivers the traffic, the web application serves the interface between the client & the server.

TL;DR Your client is being over paranoid as anyone that has access to these logs has access to the source code & database values. If they have gotten as far as apache & os logs, your clients data is already being read.
Was This Post Helpful? 0
  • +
  • -

#9 RuneChart  Icon User is offline

  • New D.I.C Head

Reputation: 2
  • View blog
  • Posts: 31
  • Joined: 13-July 11

Re: Places where apache servers log website user activity?

Posted 11 May 2013 - 01:49 PM

I agree he's being overly cautious, but I'm trying to do what's asked of me to the best of my ability.

The database built for the site doesn't actually contain any identifying information about visitors, which is his main concern.

Well, if the VPS company keeps some logs, I guess we can't really do anything about that.

Anyways, thanks for the information.
Was This Post Helpful? 0
  • +
  • -

Page 1 of 1