Preventing a system from unauthorized access, modification, disruption, or destruction.

learn more… | top users | synonyms (1)

2
votes
2answers
91 views

How to Secure Wordpress website using .htaccess , allowing only index.php execution access

I am responsible for security of lots of shared hosting server. We have at least 500 wordpress website in each server. Some of the website owners keep a weak password for WP admin or use vulnerable ...
3
votes
1answer
65 views

Can spambots access pages available to only registered, authenticated users?

I have a web application where users register and are activated via an email sent to the email address they supplied. Then there are pages that are only visible to registered users (non-user access ...
2
votes
1answer
30 views

White labelling with frames and IE

I have a SaaS application that offers some basic white-labelling functionality related to CSS, company logos etc. However, one client now wants to white-label the application with their own URL so ...
1
vote
1answer
83 views

How to setup an implicit FTPS encryption on cPanel server?

Currently my server is configured to use TLS encryption for FTP. It is explicit since it uses FTPES and on port 21. How can I switch to implicit FTPS that works on port 990? I'm using Pure_FTPd. I ...
1
vote
0answers
14 views

Is it able to disable secure attribute for Cookie on SSL connection?

There are HTTP and HTTPS page on our site on Apache. So We need to convert from HTTPS to HTTP or from HTTP to HTTPS to prevent from login session cookie fired. I already know that it does not make ...
1
vote
0answers
21 views

How to find the folder in a host server with its name starts with a “~”?

For example: http://my-domain/~service In this case, I couldn't find a "~service" folder or file in the server but the url does work, which is very weird.
1
vote
0answers
5 views

.CA Domain registratrs for DNSSEC

We have a .ca (CIRA) domain that currently uses DNSSEC through the ISC DLV registry service. We are aware that DLV is shutting down by 2017. We have communicated with CIRA respecting .ca registrars ...
1
vote
0answers
62 views

Suspicious Web Traffic from Amazon.com ISP

Just a few hours back I was checking my logs when I found a whole bunch of traffic from IP address 54.174.xx.xx and ISP Amazon.com (validated from Google analytics). It lasted for an hour and then ...
1
vote
0answers
54 views

What file permissions should I set before I give website project folder to hosting service?

I am using a CMS called Jekyll to build a website. My understanding of jekyll at this point is that it helps me to generate static web pages by providing me a simple boilerplate for a website and ...
1
vote
0answers
32 views

What is infecting these networks between 10/25/15 and 11/1/15?

Just noticed a fancy new graphical threat dashboard in the Google malware scan systems. There seems to be a cleanup then subsequent spike in infected sites across various [less-than-high-quality] ...
1
vote
0answers
83 views

Another Google-Based Test/Referrer Hitting Our Site, This Time it Hints We are a Test “Fuzz” Case

Noticing today that there is yet another strange visitor hitting our server/site from a Google IP. It came via a path to an old image that was never linked out to my knowledge. This disturbs me ...
1
vote
0answers
46 views

Performance: 4096 Bit RSA-Key compared to 2048 bit RSA-Key

Is there a comparison between 4096 Bit RSA-Key and a 2048 Bit RSA-Key? Id like to know what impact on performance it has, if Im choosing a 4096-Bit key for ssl-encryption. Is there any info which ...
1
vote
0answers
50 views

Possible to leave proc_open() enabled on a shared host?

We are working on a PHP component that requires proc_open() for it to work. Because of this, we have trouble running on common shared hosts because proc_open() together with other functions like ...
1
vote
0answers
34 views

Security and Apache Methods

I occasionally get annoying POST requests but one lately caused a 500 error. Not a biggie really, but it got me thinking. My site does not have but one form. Outside of this, POST should not exist ...
1
vote
0answers
89 views

Restrict Plesk user for external developer access

We are commissioning an external developer to develop part of our site and he will also need access to a MySQL database attached to the domain but I can't figure out how to create a user that has the ...
1
vote
0answers
54 views

How to clean PmWiki from JS:Includer-AWG and protect my site from future infections?

I'm hosting a site for an NGO for several years now. The site seems to be based on a PmWiki backend. I don't know much details because I'm just hosting the site and I'm not the guy who set it up. I ...
1
vote
0answers
111 views

Atlassian Confluence batch.css blocked by CheckPoint R75 firewall

Our internal firewall is blocking Confluence's batch.css. The error message is: security scanner detected I know that batch.css is made from all other CSS files. I found that icons.css and ...
1
vote
0answers
303 views

IIS Not Accepting Active Directory Login Credentials

I have an ASP.NET web form using Microsoft's boilerplate Active Directory login page, set up exactly as suggested. Windows Authentication is activated on the "Default Website" and "MyWebsite" levels, ...
0
votes
0answers
30 views

What kind of attack causes a JavaScript 'out of memory' on the attackers device?

We experienced a strange attack yesterday. Our error log picked up the same 'out of memory' JavaScript error from a single IP address every 10 seconds. The requests came from 6 client ports on the ...
0
votes
0answers
42 views

Security in MVC code-first entity framework

I am new to ASP.NET MVC and to Azure (in which our application will be hosted). And I am new to security in general. So I'm wondering how secure the use of code-first entity framework in asp's ...
0
votes
0answers
94 views

Framekiller and google rankings

This is the javacript code that I use to prevent clickjacking in my current project. <style id="antiClickjack">body{display:none !important;}</style> <script ...
0
votes
0answers
336 views

SIMPLEST way to set up password protection for a static site, with basic admin UI?

I have a static site. I would like the simplest approach to password protecting a directory, with a basic admin UI for adding/removing users. I will have so few users that I don't care about ...