The majority of people on the Internet are good and honest people. However, a few people are surfing on the internet, which is fun to look at web pages and find out the vulnerabilities, with a few simple tips that can help you create your web page with a common security feature.
Now, of course, the subject matter of the security of your data is a complex one, and it will be far beyond the scope of this column. However, I have to get to the base, which needs to be done to alleviate any potential issues that could allow people to see what they can't do.
Password protected Directories If you create a folder on the server that needs to stay private, don't depend on people to guess the folder's name. It is the best way to protect against it in the folder with the server level and a password.
For more than 50% of the websites are running on an Apache server, so let's take a closer look at how to secure a directory of an Apache server password. Get Apache to accept the configuration commands from a file with the given name .htaccess, located in the following folder.
The lines in the file .htaccess impact the folder and sub-folder. The folder does not have its own file .htaccess. Apache also uses a file called for the protection of the folder with a password .htpasswd. This is the file containing the user name and password, which you will have access to.
The password will be encrypted, allowing for creating a password; you will need to use the htpasswd program. To access it, go to the server's command prompt, and type htpasswd. If you receive the error message "command not found," please contact your system administrator for help. Also, please keep in mind that many web hosts are offering site-based methods to protect data, so you can do anything if they do it this way, and it is not an independent director. Well, let's move on.
Enter the "htpasswd-c. htpasswd my username", true, "my username" is the user name that you want to be. You will now be asked to enter your username and password. To confirm this, and the file is to be created. You can check it to make sure it via FTP. Also, if the file is located in the web folder, move it to not open to the general public. Open or create your own on file .htaccess.
In regard to the following: AuthUserFile
/home/www/passwd/.htpasswd AuthGroupFile
/dev/null AuthName "Protected Folder", AuthType
Basic require valid-user In the first line, enter the path to the directory where your file is located .htpasswd. As soon as it's ready, you will receive a pop-up window where you can get to this folder on your site. You need to log in to see it.
To Turn Off Directory Listing By default, the directory is on your site because it doesn't have to have a certified home page of a file index.htm, index.php, default.htm. Instead, you get a list of all the files in that folder. Maybe you don't want people to see it all you've got. The easiest way to protect yourself from this is to create a blank file, and you don't have to index.htm then download it into the folder. The second option is to use a file .htaccess to disable any of the directories in the list.
To do this, include the string "Options-Indexes" in the file name. Now, users get a 403 error, not just a list of the files on it. Please remove the Installation files. If you install new software and the scripts on your side, they will often come up with the installation or upgrade script.
Have them on your server, which could be a major security issue, because if someone is familiar with this software, they will be able to find it, and run the scripts to install/update it, and, thus, to dump their entire database, configuration files, etc., etc. A well-written program will warn you about the removal of any of these items before using the software. However, make sure that it is done.
Stay tuned for updates. Those of you running the software packages on your website; must remove the updates and security alerts related to this program. Simply delete the files from the server. By not doing this, you would be wide open to hackers. In fact, a lot of times, a big security hole is discovered and reported to you, and there will be a delay before the development of the software by the release of a patch for it. Everyone else can be found on the web-pl.
How many days u required for approval of articles?
You must be logged in to post a comment.