You searched for .htaccess - Page 2 of 3

WordPress advisory: Akal premium theme XSS vulnerability

This post describes the Akal premium WordPress theme XSS vulnerability that I discovered. The theme suffers from a reflected Cross Site Scripting (XSS) vulnerability that would allow an attacker to steal an admin's cookie, if WordPress wasn't secured against that type of attacks.

By Jan Reilink 22/08/2016Web application security

WordPress

SSL in WordPress: how to move WordPress to HTTPS? The definitive guide

Having an SSL certificate in your WordPress is the de-facto standard nowadays, did you know that? Google ranks sites having HTTPS higher in their SERP. But in WordPress, how do you configure an SSL certificate and HTTPS URL? You'll learn the important steps to move WordPress from http to https

By Jan Reilink 15/07/2016WordPress

WordPress

17+ Useful WordPress snippets

Here are 17+ valuable WordPress snippets for site-specific plugins and functions.php to provide you a better WordPress experience. Enhance your WordPress site with these small PHP snippets: WordPress filters, actions and functions. Quickly add or extend the functionality you need for your WordPress website! Read on...

By Jan Reilink 30/05/2016WordPress

Windows Server

How to block BaiduSpider bot User-Agent?

The Baidu spider (BaiduSpider user agent) can be a real pain to block, especially since it does not respect a robots.txt as it should. This post shows you how to block Baidu Spider bot, using IIS URL Rewrite Module based on its User-Agent string.

By Jan Reilink 08/08/2015Windows Server

WordPress

My WordPress web.config

Do you host your WordPress website on Windows Server IIS? And are you having trouble with your web.config? I often receive questions about how to use a web.config file in WordPress on Windows Server, and which settings are important for a WordPress site. Maybe it's because I'm a WordPress on Windows Server IIS enthusiast, so here is my web.config for your convenience (really, it's not that special).

By Jan Reilink 22/06/2015WordPress

GNU Linux Windows Server

Redirect HTTP to HTTPS

Various HTTP to HTTPS redirection methods, for Windows Server IIS and Linux Apache.

By Jan Reilink 13/03/2015GNU Linux, Windows Server

Web application security

Joomla websites abused as open proxy for Denial-of-Service attacks

Joomla websites using the Googlemaps plugin for Joomla are actively abused as open proxy for launching Denial-of-Service (DoS) attacks. The problem with the Joomla Googlemaps plugin lies in the fact anyone can execute cURL HTTP requests to remote websites.

By Jan Reilink 16/11/2014Web application security

GNU Linux

Sysadmins of the North goes global!

How to set up a global Geolocation DNS load balancing Varnish Cache Content Delivery Network with Bind9, geo-ip database, Varnish Cache and DigitalOcean. DIY High-Availability for your website!

By Jan Reilink 29/10/2014GNU Linux

Windows Server

Mod_evasive on IIS

Website DDoS protection with mod_evasive.Mod_evasive is a module for Apache and Windows Server IIS (using Helicon Ape). It provides protection and evasive action in the event of an HTTP DoS-, DDoS or brute force attack. Detection is performed by creating an internal dynamic hash table of IP Addresses and URIs, and denies an IP address access to a website if it's requesting the same page more than 10 times a second. This is configurable.

By Jan Reilink 24/07/2014Windows Server

WordPress

Huge increase in WordPress xmlrpc.php POST requests

WordPress xmlprc.php DDoS and brute-force attacks. How to identify, block, mitigate and leverage these xmlrpc.php scans, brute-force, and user enumeration attacks on WordPress sites... Secure WordPress xmlprc.php interface and reduce service disruption.

By Jan Reilink 07/07/2014WordPress

Windows Server

Remove IIS Server version HTTP Response Header

Windows Server IIS love to tell the world a website runs on IIS. And dito for ASP.NET Framework. But this gives hackers a lot of information, right? Let's remove the IIS Server header and ASP.NET version headers. Security by obscurity as a pro :-)

By Jan Reilink 06/07/2014Windows Server

Windows Server

How to hide the .php file extension with IIS URL Rewrite Module

How to hide file extensions, such as .php or .asp, with URL Rewrite Module in IIS. This example will hide the .php extension using IIS URL Rewrite Module, in a ready to use web.config & .htaccess example: extension less URLs in IIS.

By Jan Reilink 23/05/2014Windows Server

WordPress

Block WordPress comment spammers manually

Learn to block WordPress comment spammers manually. The less spammers hit your WordPress blog, the better your blog performs, is one of my opinions. A second is, the less unnecessary plugins you use on your WordPress blog, the better. So, a little while ago I decided to remove plugins like Stop Spammer Registration Plugin and do its work myself. Here is why & how.

By Jan Reilink 30/11/2013WordPress

Windows Server

Create your own PHP based Origin Pull CDN

The advantage of having your website content hosted on a Content Delivery Network (CDN) is having your content distributed and stored across the Globe. Utilizing the network of the Content Delivery Network provider. Hosting your WordPress website on a Content Delivery Network is an important WordPress optimization tip. Here is how to create your own Origin Pull CDN with just a few lines of PHP...

By Jan Reilink 17/02/2013Windows Server

Windows Server

Remove ETags HTTP response header in IIS

In this post you'll learn how to remove the ETag header in Windows Server IIS as Yahoo! YSlow recommends. Here I show you how to properly remove ETag HTTP response headers with an IIS Rewrite Module Outbound rewrite rule.

By Jan Reilink 24/01/2013Windows Server

Search results for: .htaccess

WordPress advisory: Akal premium theme XSS vulnerability

SSL in WordPress: how to move WordPress to HTTPS? The definitive guide

17+ Useful WordPress snippets

How to block BaiduSpider bot User-Agent?

My WordPress web.config

Redirect HTTP to HTTPS

Joomla websites abused as open proxy for Denial-of-Service attacks

Sysadmins of the North goes global!

Mod_evasive on IIS

Huge increase in WordPress xmlrpc.php POST requests

Remove IIS Server version HTTP Response Header

How to hide the .php file extension with IIS URL Rewrite Module

Block WordPress comment spammers manually

Create your own PHP based Origin Pull CDN

Remove ETags HTTP response header in IIS

Windows Server

Web applications

PowerShell