A.
Ensure that all SSI files are SSL enabled.*
B.
SSI-enabled files should have a separate extension, such as the conventional .shtmlS
C.
Disable the ability to run scripts and programs from SSI pages. To do this replace Includes with IncludesNOEXEC in the Options directive
D.
A server administrator can enable suexec )