Hiawatha is a highly secure webserver, in both code and features. Allthough it can run on any kind of CGI / FastCGI application, it has been optimized for usage with PHP. Most well known PHP frameworks and CMS applications have been tested with Hiawatha and ran without a problem.
Hiawatha supports many web and HTTP features such as CGI/FastCGI, HTTP authentication, virtual host support, request pipelining, keep alive connections, URL rewriting and many more.
You can take Hiawatha for a test drive to see what it can actually do for you!
Here are some key features of "Hiawatha":
Request methods:
· GET (duh!)
· POST
· HEAD
· OPTIONS
· TRACE
· PUT
· DELETE
HTTP codes:
· 200 OK
· 201 Created.
· 204 No Content
· 206 Partial Content
· 301 Moved Permanently
· 302 Found
· 304 Not Modified
· 400 Bad Request
· 401 Unauthorized
· 403 Forbidden
· 404 Not Found
· 405 Method Not Allowed
· 408 Request Timeout
· 411 Length Required
· 412 Precondition Failed
· 413 Request Entity Too Large
· 416 Requested Range Not Satisfiable
· 500 Internal Server Error
· 501 Not Implemented
· 503 Service Unavailable
· 505 HTTP Version Not Supported
Extra:
· Access/connection control
· Banning
· CGI support (including PHP)
· CGI wrapper (run CGI under a diffrerent uid/gid in a secure way)
· Chunked Transfer-encoding
· CommandChannel (control Hiawatha by telnetting to a special port)
· Cookie support
· Cross-site Scripting (XSS) prevention
· Cross-site Request Forgery (CSRF/XSRF) prevention
· Customizable ServerString
· Directory listing with customizable stylesheet
· DoS/flooding protection
· FastCGI support (load-balanced)
· GZip Content-Encoding support (in a unique way, read the manual for more information.)
· HTTP authentication (basic and digest)
· If-(Un)Modified-Since header field
· Interface binding control
· Internal file caching
· IPv6 support
· Keep-alive connections
· Large file support
· Logging
· Range header field (single range support)
· Referer control for images (prevent external image linking)
· Remote monitoring
· Request pipelining
· Rootjail
· SSL support
· SQL injection prevention
· Traffic throttling/shaping (control uploadspeed)
· URL rewriting via regular expressions
· Userdirectory support
· Virtual host support
· Volatile object support (for frequently changing objects, like webcam pictures)
· XSLT support
What's New in This Release: [ read full changelog ]
· BanOnInvalidURL option added
· PolarSSL updated to version 1.1.1
· Small improvements in Windows packaging script
· Bugfix: paths missing in default values and examples in manual pages