Tag Info

New answers tagged

2

Facebook in general doesn't like to send users out of it, that's why it makes it difficult for the users to leave. I've had that problem in the past, then stopped, then had it again, there seems to be no reason for this. I think Facebook handles the same links differently. For example sharing a link inside a group is not the same as sharing it on a wall or ...


0

It is possible to create a different directory for each user using FTP and IIS. To do so you need to use the "user isolation" option when setting up FTP. Given that you are sharing files with these users, IIS's FTP server sounds like it would be a good option for you. Mac and Linux users can access FTP because all modern browsers support the ftp:// ...


1

If you are going to use Paypal REST API then you need to ensure you are PCI Compliant. ( Which involves alot more than a privacy policy and ssl cert) If you use the PayPal REST APIs for accepting credit card payments, you handle card data directly and will need to ensure you are PCI compliant. ...


1

You are confusing me. You say on one hand that you are not storing the credit card number, but then you say you can sell it. I would not do either to tell you the truth. People do not want their information to be sold especially credit card numbers. This is a bad thing. You can use the information to complete the transaction and for partner applications, ...


2

So there are already some answers given. For the second set, the one with the http://url in the request, these tries to find badly configured (not secured) proxy servers that could be wide open. These can then be used to hide the real origin of attacks/scans directed onto an other machine. The other machine will then see the attack as if it was coming from ...


1

Okay. Most of these access (at least) are landscaping attempts to find potential vulnerabilities on your server. They are trying to fingerprint your server to know what web-based applications are installed. The first set and third set are clearly landscaping. The second set may be a result of forged request headers but still likely to be landscaping- not ...


10

You can encode your code using ionCube and similar products. Your client won't be able to view, study or take it. However, everything can be reverse engineered meaning that, no matter how you encode your code, it can be decoded. For example, ionCube can be decoded with decry.pt. It works, I can confirm it. So you'll never be able to really secure your code ...


3

User agent wget Blocking the user agent wget will block operating systems that use wget to download files within the terminal i.e Linux, MacOS, Arm etc. This will block every file from being downloaded using wget example.pdf. But why block wget? There's no right or wrong to this question but generally webmasters want site visitors actually visiting their ...


0

It is necessary to include all subdomains as SSL to get into the preload list as found here https://hstspreload.appspot.com/ Have a valid certificate. Redirect all HTTP traffic to HTTPS - i.e. be HTTPS only. Serve all subdomains over HTTPS. Serve an HSTS header on base domain: Expiry must be at least eighteen weeks (10886400 seconds). The ...


1

It is not mandatory to have an wildcard SSL Certificate for the inclusion in the HSTS Pre-load list. It you having a single domain you can use any Domain Validated SSL Certificate for the inclusion in the HSTS Pre-load list rather than using Wildcard SSL Certificate.



Top 50 recent answers are included