You searched for backdoor - Sysadmins of the North

Set PHP handler accessPolicy (Request Restrictions) to Read in IIS

You are here: Sysadmins of the North » You searched for backdoor

Disallow direct access to PHP files in wp-content/uploads/

Secure wp-content/uploads in Linux Apache and Windows Server IIS

You are here: Sysadmins of the North » You searched for backdoor

Check WordPress Core files integrity

Check WordPress integrity, verify WordPress Core files md5 checksums against WordPress’ checksums API, using this standalone PHP file. I chose to use a standalone PHP script to check the md5sum of WordPress Core files against the API so you’re not dependent on a possibly hacked WordPress installation. This kind of guarantees the result can be trusted, as opposed to using a WordPress plugin. I think this is a better integrity check of WordPress Core files.

You are here: Sysadmins of the North » You searched for backdoor

HackRepair.com’s Bad Bots .htaccess in web.config for IIS

by Jan Reilink

Jim Walker from HackRepair.com posted a 2016 version of his Bad Bots .htaccess on Pastebin. I offered Jim to translate his Bad Bots .htaccess to web.config, to be used with Windows Server IIS. And here it is, learn to protect your WordPress website with this web.config file!

You are here: Sysadmins of the North » You searched for backdoor

My WordPress web.config

by Jan Reilink

Do you host your WordPress website on Windows Server IIS? And are you having trouble with your web.config? I often receive questions about how to use a web.config file in WordPress on Windows Server, and which settings are important for a WordPress site. Maybe it’s because I’m a WordPress on Windows Server IIS enthusiast, so here is my web.config for your convenience (really, it’s not that special).

You are here: Sysadmins of the North » You searched for backdoor

Secure WordPress uploads folder, disable PHP execution

by Jan Reilink

Deny direct access to PHP files in wp-content/uploads/

You are here: Sysadmins of the North » You searched for backdoor

Exploit PHP’s mail() to get remote code execution

by Jan Reilink

Exploit PHP’s mail() function to perform remote code execution, under rare circumstances.

You are here: Sysadmins of the North » You searched for backdoor

Grep for forensic log parsing and analysis on Windows Server IIS

by Jan Reilink

How to use GnuWin32 ported tools like grep.exe and find.exe for forensic log file analysis in Windows Server. In this article I’ll give some real live examples of using these ported GnuWin tools like grep.exe for logfile analysis on Windows servers. The article provides three example, as an alternative to LogParser, because finding spam scripts fast is often very important.

You are here: Sysadmins of the North » You searched for backdoor

7 Snippets to use .htaccess as a Web Application Firewall

by Jan Reilink

Here are 7 .htaccess snippets for you to secure your website, by using .htaccess as a kWeb Application Firewall (WAF). You can use this information to block exploits and rogue HTTP requests on your website.