Questions tagged [access-control]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
1
vote
0answers
9 views

Our website is flagged as Suspicious Content by Vodafone and antimalware systems

We've faced issue caused by marking our website as suspicious by Forcepoint and CleanMX. It caused us another problem. Vodafone has stopped letting users to our site. Before, we had problems with ...
1
vote
0answers
38 views

Is there a user and access control library for MERN stack? [closed]

I am currently learning the MERN stack, having previously worked mostly in Django. However, I find myself recoding the same things over and over again manually and not being entirely satisfied with ...
3
votes
0answers
24 views

NGINX configuration for the same folder protection rewrites in each of thousands of subdirectories

The following code allows me to protect a specific folder with the membership software we're using. The problem is if we have 1,000 folders we need to protect, we need to copy/paste this same code for ...
4
votes
1answer
2k views

Deny access to all PHP files using FilesMatch, but make an exception for one file

Currently, using htaccess I am denying access to any PHP file in a directory, but not the JS, PNG, CSS files in the same directory. <FilesMatch "\.php$"> Order deny,allow Deny from all </...
2
votes
0answers
18 views

Allowing access to protected area for multiple users from one organisation

I have a website which has a password protected area of content. This content can by accessed by a number of employees of a subscribing company. For example, The Acme Widget Co. has 100 employees, ...
1
vote
0answers
224 views

Restrict anonymous access to a Mediawiki site while putting a few pages on a white list of publicly accessible pages?

I have set up a Mediawiki using Bitnami through AWS, I have used the following in an attempt to restrict access unless a user logs in to the wiki. # Disable reading by anonymous users $...
1
vote
1answer
147 views

How to limit requests to certain domain in nginx?

I have a domain like sub.example.com. I'd like to allow GET access to certain paths uploads only through example.com Something like this: location ~ ^/uploads { allow example.com; ...
1
vote
0answers
480 views

Apache FilesMatch to deny access to all “.config” files is working except for web.config

In my apache server I don't want to serve any files with extensions .config because it could contain potentially sensitive information. In my apache2.conf file I added: <FilesMatch "\.config"> ...
1
vote
0answers
18 views

Allow our own systems to use an API and restrict it from the general internet without using authentication

I have an Apache server which is reverse proxy'd to some Java container. In Java container there is an API that we don't want internet to see but expect our own systems to use it without any ...
1
vote
2answers
3k views

How do I give a hired developer access to my bluehost cpanel?

I can't find any way to like "create a guest account" to access my account without just giving him my account credentials. How should this be done? I can't find any help articles on it.
3
votes
1answer
162 views

Does requiring login to access content hinder SEO?

I am wondering what the SEO effects of a 'Login Wall' is. More specifically, we have content that is region specific, so for instance a URL could look like www.example.com/content/Canada/Ontario. This ...
2
votes
1answer
1k views

How to restrict web site/intranet access to company network?

What is the best/most secure way to create a web site or intranet on an externally hosted server, but make it only accessible from within my company's network? I am trying to avoid running my own ...
1
vote
1answer
136 views

Limit Sitemap Access to Search Engines

I have a sitemap file which generates the sitemap in real time and lists every page on the site. Eventually the site will have tens of thousands of pages so generating the sitemap will take a fair bit ...
1
vote
2answers
440 views

How does robots.txt work with sites in subfolders?

I have a single web host with a number of other parked domains/sites in sub-directories, like this: example.com is the primary site and root directory of the web hosting. example.com/www.example2....
1
vote
1answer
2k views

Why does my IIS virtual directory serve folders but not files?

I have a network share (say, \\mysite\myshare) being served by an IIS 7.5 virtual directory at (say) http://www.example.com/myshare. From a web browser, I can click & navigate every folder and ...
1
vote
1answer
21 views

Good Faith contract solidified by joint-dual access to server directory

Our freelance marketing team needs earn a portion of every online sale. They will receive notification via email upon each sale. The trust in the system needs be instilled by a secure and permission ...
1
vote
1answer
340 views

Is there anything unusual or nefarious about private IP addresses in server logs?

A site I help take care of has just started getting crawled by somebody from 172.31.13.241 and 172.31.42.227 . According to WHOIS info, these are part of a block reserved by IANA for special purposes, ...
0
votes
3answers
137 views

Does uploading index.php protect the other files that would normally be visible in that directory?

PHP is a mystery for me. In the FTP main directory of my website, I uploaded 2 files: a.txt and b.txt. If I enter my website address in my browser I can view both a.txt and b.txt. However when I ...