... Apache HTTP Server Version 2.4 . ... Access Log . ... Anyone who can write to the directory where Apache httpd is writing a log file can almost certainly gain access to the uid that the server is started as, which is normally root. ... In addition, log files may contain information supplied directly by the client, without escaping. ... By adding information on the virtual host to the log format string, it is possible to log all hosts to the same log, and later split the log into individual files. ...