Tagged Questions
0
votes
0answers
11 views
How to double protect admin access in PyroCMS
I have read how to protect admin folder with .htaccess and .htpasswd file but in PyroCMS admin login (ex: example.com/admin) just only routing system (no admin folder yet).
So, how can I double ...
0
votes
0answers
264 views
blocking bad bots with robots.txt in 2012 [closed]
does it still work good? I have this:
# Generated using http://solidshellsecurity.com services
# Begin block Bad-Robots from robots.txt
User-agent: asterias
Disallow:/
User-agent: BackDoorBot/1.0
...
0
votes
0answers
107 views
SIMPLEST way to set up password protection for a static site, with basic admin UI?
I have a static site.
I would like the simplest approach to password protecting a directory, with a basic admin UI for adding/removing users. I will have so few users that I don't care about ...
2
votes
1answer
259 views
Tell apache to point to a subfolder as default starting point for public
What would be the different methods of telling Apache to serve up httpdocs/public instead of httpdocs as the default starting point?
I want to be able to have my includes and logs directories behind ...
4
votes
1answer
140 views
Best way to protect public facing development environments?
We're in the process of setting up individualized dev environments for our developers. All of our developers are remote and we don't have a VPN or anything to bring this in house.
But here's the ...
2
votes
3answers
1k views
How to restrict site access to all countries except mine with .htaccess?
I used this tool to download list in ".htaccess allow" format to allow traffic from my country and restrict all others but it's still accessible when visiting from bunch of foreign proxies.
I'm ...
0
votes
2answers
466 views
Hacked .htaccess - Inconsistent Results
At present a large number of .htaccess files are being created in various website folders throughout the site. Current .htaccess files are also being modified to include the following (cleaned up) ...
2
votes
1answer
290 views
Configuring directory access on a server. .htaccess and alternatives?
I have written a small PHP package/site-template (should I say).
It contains a directory data/ that contains some important files that the users should not be able to see.
These file should however ...
0
votes
1answer
900 views
IIS7.5 + Wordpress + Restrict Access to wp-login.php by client IP address
I am moving from an Apache host to IIS. One of my sites in Wordpress (running Multi-site) which give me multiple blogs. I have moved all my rules from my .htaccess to the Microsoft URL ReWrite module. ...
1
vote
1answer
90 views
Site overthrown by Turkish hackers
Go ahead, laugh. I forgot to remove the default admin/admin account on my blog. SOmebody got in and has replaced my homepage with some internet graffiti. I've used .htaccess to replace the page with a ...
1
vote
1answer
6k views
.htaccess password protection generates 500 internal server error
I have created a .htpasswd file using htaccess tools of which I have uploaded to the root of my web hosting space (/public_html is my web root).
I created a .htaccess file which referenced the ...
2
votes
2answers
121 views
Implications on automatically “open” third party domain aliasing to one of my subdomains
I have a domain, let's call it www.mydomain.com where I have a portal with an active community of users.
In this portal users cooperate in a wiki way to build some "kind of software".
These software ...
0
votes
2answers
272 views
block users by country in .htaccess
Is there a way to block users from a particular region. Currently I have compiled a list of over 100 IP addresses that I block in my .htaccess file. Unfortunately as the list grows I see a great ...
2
votes
1answer
314 views
Trigger IP ban based on request of given file?
I run a website where "x.php" was known to have vulnerabilities. The vulnerability has been fixed and I don't have "x.php" on my site anymore.
As such with major public vulnerabilities, it seems ...
4
votes
5answers
669 views
Site compromised .htaccess files everywhere
Some of the sites we're hosting are compromised by... I don't know what.
Every directory on the webserver contains a .htaccess file which redirects a user coming from a search engine to a page which ...
0
votes
1answer
146 views
Controlling Access using htpasswd and htaccess
I've got a bit of a peculiar problem on my site. I'm using a .htaccess and .htpasswd file to protect the root of the site. This works great, but when I try to view a video file on my site, it prompts ...
3
votes
4answers
224 views
2
votes
2answers
389 views
Restrict access to web directory with .htaccess
Let me just say that doing this sort of thing with .htaccess files has never been a strong point for me. Let's say that I have a directory in my web root: /dir/data
Within that directory let's say ...
