You searched for - Page 13 of 19 - Sysadmins of the North

Joomla websites abused as open proxy for Denial-of-Service attacks

Joomla websites using the Googlemaps plugin for Joomla are actively abused as open proxy for launching Denial-of-Service (DoS) attacks. The problem with the Joomla Googlemaps plugin lies in the fact anyone can execute cURL HTTP requests to remote websites.

By Jan Reilink 16/11/2014Web application security

GNU Linux

Convert decimal to hex in Bash?

Convert decimal to hex, hexadecimal to decimal and convert Unix timestamps to dates in Bash. Learn to convert something in Bash.

By Jan Reilink 06/11/2014GNU Linux

GNU Linux

Sysadmins of the North goes global!

How to set up a global Geolocation DNS load balancing Varnish Cache Content Delivery Network with Bind9, geo-ip database, Varnish Cache and DigitalOcean. DIY High-Availability for your website!

By Jan Reilink 29/10/2014GNU Linux

get current PHP realpath_cache_size value

Code base

How to set a good PHP realpath_cache_size

Learn how to set a good PHP realpath_cache_size and optimize your PHP performance. . Increasing realpath_cache_size might greatly improve PHP performance, as PHP states: "this value should be increased on systems where PHP opens many files." Setting a correct value for PHP realpath_cache_size can greatly improve PHP performance and optimize WordPress - and other CMS's - websites.

By Jan Reilink 23/10/2014Code base

Code base

Redirect old URL to new URL or send 404 page with PHP

Use a PHP redirect script to redirect old PHP URLs to new ones. This examples uses a 301 Moved Permanently redirect, perfect for SEO.

By Jan Reilink 12/10/2014Code base

WordPress

Display commas in WordPress tags

Sometimes you may want to display commas in tag names. For example if you have a business directory listing and want to create one single taxonomy (tag name) "cafe, restaurant, bar". This post shows you how to create a filter in your functions.php file to display WordPress tags with a comma, enjoy!

By Jan Reilink 12/10/2014WordPress

MySQL

How to string replace on all WordPress posts in MySQL

Replace all instances of a string in WordPress using phpMyAdmin and SQL statements, or a WordPress plugin. Learn how to replace content in your MySQL database in bulk with MySQL REPLACE.

By Jan Reilink 13/09/2014MySQL

Windows Server

Conditionally start Application Pools on remote IIS web servers

Learn how to start all stopped application pools in IIS that have the ApplicationPool.AutoStart property set to true using AppCmd.exe or PowerShell.

By Jan Reilink 11/09/2014Windows Server

Code base

Check website availability with PHP and cURL

Perform a PHP cURL request to check if your website is up or not. Verify your website's online status and availability using just PHP.

By Jan Reilink 10/09/2014Code base

Web application security

Exploit PHP mail() to get remote code execution

If you are able to control the 5th parameter of PHP mail() function ($options), you have the opportunity to execute arbitrary commands. Remote Code Execution (RCE) in PHP mail()

By Jan Reilink 07/09/2014Web application security

Windows Server

Custom PHP version on IIS Express and WebMatrix 3

PHP 7 with OPcache in IIS Express for Microsoft WebMatrix 3: learn how to create your own PHP development environment easily with Microsoft WebMatrix and IIS Express and your own custom PHP version. Note: this guide also applies to newer PHP versions, just change the version numbers. (outdated)

By Jan Reilink 19/08/2014Windows Server

Web application security

Increase in SQL injection attacks

Since a week or so, I notice a huge increase in SQL injection attacks on various websites. Anyone else seeing the same SQL injection attacks lately? This increased SQL injection activity - on various web sites and databases - has the following characteristics

By Jan Reilink 07/08/2014Web application security

Web application security

MySQL sleep() attacks

MySQL sleep() command injection attacks: how not validating your PHP user input can lead to Denial of Service (DoS) attacks against websites and back-end database servers. Simply by putting "AND sleep(3)" in the address bar... Here is how to put a MySQL server to sleep, happy SQL injection!

By Jan Reilink 05/08/2014Web application security

WordPress

Send authenticated SMTP email over TLS from WordPress

How to configure TLS for SMTP email in WordPress. I was suprised WordPress is not able to send email using an SMTP server out-of-the-box. Not to mention using authenticated SMTP or TLS transport for security. A quick Google search showed me multiple plugins to handle this, but I wanted to create something myself. Here is how to override the wp-mail() function and send email using authenticated SMTP and StartTLS from WordPress.

By Jan Reilink 29/07/2014WordPress

Code base

Magento maintenance script for IIS

Optimize the speed and performance of your Magento ecommerce webshop by carrying out important maintenance. Now for Windows Server IIS too. Remove old MySQL database log files and Magento cache data on a regular basis.

By Jan Reilink 25/07/2014Code base

Search results for:

Joomla websites abused as open proxy for Denial-of-Service attacks

Convert decimal to hex in Bash?

Sysadmins of the North goes global!

How to set a good PHP realpath_cache_size

Redirect old URL to new URL or send 404 page with PHP

Display commas in WordPress tags

How to string replace on all WordPress posts in MySQL

Conditionally start Application Pools on remote IIS web servers

Check website availability with PHP and cURL

Exploit PHP mail() to get remote code execution

Custom PHP version on IIS Express and WebMatrix 3

Increase in SQL injection attacks

MySQL sleep() attacks

Send authenticated SMTP email over TLS from WordPress

Magento maintenance script for IIS

Windows Server

Web applications

PowerShell