Tag Info

New answers tagged

0

One of the most important things you can do is utilize strong passwords. E.g., at least 8 characters and characters from at least 3 character sets, e.g., letters, numbers, and special characters, such as a dash, dollar sign, etc. Too many people don't realize that there are people throughout the world who have automated scripts that search for systems with ...


0

Web server software typically can be configured to look for a specific file or files in a directory to display to the browser if the browser isn't requesting a specific file from a directory. E.g., let's suppose your website is accessible via www.example.com. When the web server sees a request for www.example.com/a.txt, it will display the contents of a.txt. ...


1

You have some learning to do. Your server is showing your ".txt" files because it's probably defaulting to serving plain text. When you put ".php" files in there, those are program files that need translating into something the server can serve to the browser. It won't happen by itself. You need to learn how to set up your server configuration files. Your ...


0

There's one big SEO disadvantage. Google said that it favors SSL sites but the certificate should be 2048 bit CloudFlare's "flexible SSL" is not 2048 bit.


2

One can spoof a referrer relatively easily in order to hide scans, harvesting, crawls, etc. Makes sense that a spoof would appear as an innocent search -- ie google, yahoo, bing, etc. Generally they hit the link once, so it may be 20 crawls. Also, they can sometimes spoof for advertising reasons. Think if you clicked a couple of those weird referrers, thats ...


1

You might point out that if you were actually using some illicit method of traffic generation it would be an extremely inefficient means of doing so with little benefit to you. Twenty clicks is only 0.15%, i.e., a tiny fraction of a percent, of 13,000, so there would be little incentive for you to do that. For the ones that point to specific webpages rather ...


1

I ended up using iptables to block the ips. From the root linux shell I typed iptables -A INPUT -s 217.69.133.13 -j DROP iptables -A INPUT -s 217.69.133.12 -j DROP iptables -A INPUT -s 217.69.133.10 -j DROP iptables -A INPUT -s 217.69.133.11 -j DROP iptables -A INPUT -s 217.69.133.14 -j DROP iptables -A INPUT -s 217.69.133.15 -j DROP iptables ...


4

I always urge people to be cautious in Google Webmaster Tools because there are several settings that can damage your site: Limit the Googlebot crawl rate which can effect indexing and freshness Geo targetting which can cause your site only to show up in search results for a particular country Site link demotion URL removal URL parameters which can cause ...


2

You are okay. Some may argue, but this is not a bad bot. I research these things as part of my research and while I do have a lot of activity from mail.ru, I do not have any bad bot activity doing a quick search. Mail.ru operates a search engine. This is a web crawler for their search engine. The page referred to in the agent string is ...


1

I'd say the the focus of CORS is making the web safer for final users and most of it implementation is in fact incapsulated in modern browsers. What I mean is that it is not designed to only make your serverside content protected or unreachable, as you can always NOT send the referrer headers and bypass it. This is clearly not the case for "unconscious" ...


3

Analyzing this remotely is almost impossible, but here’s my guess: You did not patch/update your Drupal installation quickly after the security advisory SA-CORE-2014-005 was published. This was a highly critical vulnerability, referred to as "Drupageddon". An attacker exploited the vulnerability and got access to your installation. The attacker created ...


1

Yep! You were hacked. You have been hacked for a period of time too. Not to panic! It happens enough and can potentially be a low-level breach that can be fixed with not too much worry. HTTPS vs. HTTP is another protocol and not another site. Theoretically, these should be the same site served as either HTTP protocol port 80 or secured/encrypted HTTP ...


0

Assuming this is a web hosted/accesable location you are making these files available on. You could make a folder for each user and give each folder a .htacess and .htpasswd file inside, thus giving each folder a unique user/password to access the content. Going to any of the urls: www.yoursite.com/user1 ... user2 ... user3 Will prompt the visitor for user ...


1

Yes use HTTPS everywhere, add a HSTS policy, use only TLS, etc. HTTPS already is "the standard" and it's plenty fast enough with a proper server setup...it's just that most folks don't take the time or wanna spend the money to use it. If you consider time to encode a drawback, consider the results of the encoding (good encryption) as a drawback too. I ...



Top 50 recent answers are included