# When using Zoneminder's own authentication, recorded CCTV images are
# accessible from the web directly without passing the authentication. This
# means any attacker could see your CCTV images without a password. In order
# to avoid this you can disable Zoneminder's authentication and configure
# standard Apache authentication (see the Apache documentation for details on
# this).
#
# If you still wish to use Zoneminder's own authentication, or have an
# internal site which needs no authentication, you can leave this configuration 
# as it is.
# Otherwise un-comment the line with "UNCOMMENT THIS LINE" in it.

# The Zoneminder web interface can be disabled by default due to a small
# security issue in the default install.
#

<Directory "/var/www/html/zm">
    Options -Indexes +MultiViews +FollowSymLinks
    AllowOverride All
    Require all granted
# Require all denied # UNCOMMENT THIS LINE
</Directory>

ScriptAlias /cgi-bin/zm "/cgi-bin"
<Directory "/var/www/cgi-bin">
    AllowOverride All
    Options ExecCGI
    Require all granted
</Directory>