About the validation of config files:
I trust users enough to give them freedom on their site (hostname), but I don't give them permission to affect other sites in the same server.
So if there is some way how to "snadbox" included config file to only one hostname, I will use it. If not, it is enough to validate it if it contains only rewrite rules (if there is not chance to affect other sites by just rewrite rules).
I trust users enough to give them freedom on their site (hostname), but I don't give them permission to affect other sites in the same server.
So if there is some way how to "snadbox" included config file to only one hostname, I will use it. If not, it is enough to validate it if it contains only rewrite rules (if there is not chance to affect other sites by just rewrite rules).