Sign up ×
Webmasters Stack Exchange is a question and answer site for pro webmasters. It's 100% free, no registration required.

I have a domain, let's call it where I have a portal with an active community of users.

In this portal users cooperate in a wiki way to build some "kind of software". These software applications can then be run by accessing ""

I then want to let my users run these applications from their own subdomains. I know I can do that by automatically modifying the.htaccess file. This is not a problem.

I want to let these users create dns aliases to let them access one specific subdomain. So if a user "pippo" that owns "" wants to run software HelloWorld from his own subdomains he has to:

  1. Register to my site
  2. Create his own subdomain on his own site,
  3. From his DNS control panel, he creates a CNAME record "" pointing to ""
  4. He types in a browser

When the software(that is physically run on my server) is called, first it checks that the originating domain is a trusted one. I don't do any other kind of check that restricts software execution.

From a SEO perspective, I care about Google indexing of but I don't care about indexing of

What are the possible security implications of doing this for my site?

Do you know some existing website implementing a domain configuration like this one?

share|improve this question

2 Answers 2

From an SEO point of view you shouldn't have any issues unless there is malware in any of those applications. If someone puts some kind of malware in their code Google may flag your site as unsafe and then anyone seeing your domain in the search results or try to view it in Chrome will see a nasty message telling them your site is unsafe and recommending not visiting it.

As far as security goes, since the code isn't actually residing on your server you should be safe from malicious code in those applications.

share|improve this answer

If you are currently using for yourself and giving users, then additionally allowing users to create as an alias of doesn't really change much.

That said, especially in the case of / I would take care to keep the subdomains clean in regards to webspam, phishing, and malware. If, for instance, a significant number of subdomains are known to contain malware, then the automated systems behind the malware analysis may assume that the whole domain potentially contains malware.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.