Apache

How to Defend against CSS and SQL Injection attacks

The last step of securing the server is implementing the logging of the GET and POST payloads, and implementing protection against Cross-Site-Scripting and SQL Injection attacks. In order to perform that, we will use the mod_security module, which we enable by adding the following line into httpd.conf: AddModule mod_security.c To enable logging of the GET [...]

How to Disable mod_security in .htaccess file

1. If you do not have one yet, an .htaccess file in the folder of your web application 2. To disable mod_security COMPLETELY, add the following line to the .htaccess file: SecFilterEngine Off OR, to disable HTTP POST scanning only, use the following instead: SecFilterScanPOST Off 3. Save the file and test your web application [...]

Secure your Apache2 with mod-security

Installation: In order to install mod-security with apache2, you need libapache2-mod-security: $sudo apt-get install libapache2-mod-security and then enable mod-security and reload apache2 $sudo a2enmod mod-security $sudo /etc/init.d/apache2 force-reload Once this is done, you will be able to filter GET, POST urls …. and apply different rules depending on what the page/variables/url contain Configuration: Apache running [...]

20 ways to Secure your Apache Configuration

First, make sure you’ve installed latest security patches There is no sense in putting locks on the windows, if your door is wide open. As such, if you’re not patched up there isn’t really much point in continuing any longer on this list. Go ahead and bookmark this page so you can come back later, [...]

How to Install Apache Solr

Requirements Java5 or greater installed A servlet container such as Tomcat, Jetty, or Resin A Solr distribution Setup Stop your servlet container From the solr distribution, copy the solr war to the webapps directory of your servlet container as solr.war From the solr distribution, copy the example solr home example/solr as a template for your [...]

How To Install Apache 2.0/PHP 4.3 and MySQL 5.0 on Redhat

• Uninstall previous versions of apache and mysql • rpm -e httpd mysql • Download and install RPM packages of MySQL’s server, client and dynamic shared libraries from mysql.com. do not opt to change the password on MySQL database unless you know what you’re doing (I don’t). If requested at first installation attempt, download the [...]