Microsoft Internet Information Services (IIS) logo

Windows Server

Last updated:

Conditionally start Application Pools on remote IIS web servers

In this article you'll learn how to start all stopped application pools that have the ApplicationPool.AutoStart property set to $True using AppCmd.exe or PowerShell. This is something you often or occasionally have to perform on various servers, for example when an application pool hangs.

blue elephant plush toy on black laptop computer -- Photo by Ben Griffiths

Useful

Last updated:

Check website availability with PHP and cURL

A useful PHP script to check if your website is up and online available. It uses PHP and cURL. This script comes in handy because website uptime and availability is important, and you want your website to be always online available.

Web applications

Last updated:

Exploit PHP's mail() to get remote code execution

Exploit PHP's mail() function for remote code execution. Apparently, if you are able to control the 5th parameter of the mail() function ($options), you have the opportunity to execute arbitrary commands.

Person in a plague doctor mask holding a syringe, illustrating SQL injection

Security

Last updated:

Increase in SQL injection attacks

Summer vacation's over? In August 2014 I noticed a huge increase in SQL injection attacks on various websites. These are their characteristics.

Person in a plague doctor mask holding a syringe, illustrating SQL injection

Security

Last updated:

MySQL sleep() attacks

How not validating PHP user input leads to MySQL sleep() injection attacks that hang your database server, and how to fix and clean it up.

Magento website homepage

Windows Server

Last updated:

Magento maintenance script for IIS

A Magento maintenance script for Windows Server and IIS: clear Magento's MySQL log tables and var cache directories on a schedule for a faster webshop.

Windows Server

Last updated:

Mod_evasive on IIS

Website DDoS protection with mod_evasive on Windows Server IIS, using Helicon Ape: how to configure it, exclude websites, and where it falls short.

WordPress XMLRPC API

WordPress

Last updated:

Huge increase in WordPress xmlrpc.php POST requests

How to identify, block, mitigate and leverage xmlrpc.php scans, brute-force, and user enumeration attacks on WordPress sites... Secure WordPress xmlprc.php interface and reduce service disruption.

Microsoft Internet Information Services (IIS) logo

Windows Server

Last updated:

Remove IIS Server version from HTTP response headers

Windows Server IIS loves to tell the world that a website runs on IIS. It does so with the "Server:" header in the HTTP response, as shown below. In this post I'll show you how to remove HTTP response headers in Windows Server IIS. You don't want to give hackers too much information about your servers, right?.

Microsoft Internet Information Services (IIS) logo

Windows Server

Last updated:

.svc WCF web service returns 404 Not Found in IIS 8

When the .svc web service handler doesn't work in IIS with ASP.NET 4.5 and returns a 404 Not Found error, you may need to add an extra handler to IIS. Read on...

Joomla ACL decision flowchart

Web applications

Last updated:

8 Tips to improve Joomla performance

Learn how to speed-up Joomla performance on Windows Server IIS using these 8 simple, but important, tips. Add caching, gzip compression, set your sessions & optimize MySQL database functions.

High Performance MySQL

GNU/Linux

Last updated:

Convert MySQL MyISAM tables to InnoDB

Converting MyISAM tables to InnoDB for more database performance, because: 1) MyISAM is old and no longer developed, and 2) InnoDB is much faster.

WordPress

Last updated:

Export and migrate WordPress to Ghost

I wanted to migrate from WordPress to Ghost, and at first failed. Here's the write-up: exporting WordPress to JSON and fixing Ghost's import errors.