You searched for security - Page 3 of 6

ASP and ASP.NET connectionstring examples for Microsoft SQL Server and MySQL

This article provides you with a couple of ASP.NET to SQL Server connectionstring examples for ODBC and OLE DB. And as a bonus for ASP to SQL Server, MySQL, and SSL encrypted connections too.

By Jan Reilink 17/10/2018Code base

Windows Server

Important note about Windows Update KB4056892

There is another VERY IMPORTANT THING with Microsoft Meltdown patches like update KB4056892: - Customers will not receive these security updates and will not be protected from security vulnerabilities unless their anti-virus software vendor sets the following registry key:

By Jan Reilink 05/01/2018Windows Server

Web application security

Protect WordPress from brute-force XML-RPC attacks

Secure WordPress against XML-PRC attacks. This post gives you some insights about how you can create an IP whitelist for xmlrpc.php, on Windows Server and Linux Apache (web.config and .htaccess). And how you can block access to xmlrpc.php file.

By Jan Reilink 02/06/2017Web application security

Web application security WordPress

Check WordPress Core files integrity

Learn the importance of checking and verifying WordPress Core PHP files md5 checksums against WordPress' checksums API, using this standalone PHP file.

By Jan Reilink 16/12/2016Web application security, WordPress

Windows Server

Intrusion Detection with Windows Event ID’s

This paper is the best I have ever read on how to build IOC’s with Windows Event ID’s. I highly recommend you to read it, it contains very useful information and some very interesting behavioral examples of attacker activity. If you are looking to enhance your detection in your core network this is the document!

By Jan Reilink 13/09/2016Windows Server

WordPress

Optimized WordPress hosting (9+ practical tips)

WordPress optimized hosting is a subject on which a lot is written about. And therefore, this post is not about where to host your WordPress blog, or who offers the best WordPress hosting. This post is for you developers, what you can do to optimize your WordPress hosting. This post is not about setting up high-availability, fail-over, clustering, IIS versus Nginx versus Apache, RAID 1, 5, 6, 10, different types of storage, and so on. It’s about solving performance issues.

By Jan Reilink 31/08/2016WordPress

Web application security

WordPress advisory: Akal premium theme XSS vulnerability

This post describes the Akal premium WordPress theme XSS vulnerability that I discovered. The theme suffers from a reflected Cross Site Scripting (XSS) vulnerability that would allow an attacker to steal an admin's cookie, if WordPress wasn't secured against that type of attacks.

By Jan Reilink 22/08/2016Web application security

Windows Server

5 Extra ways to clean up disk space in Windows Server

Disk cleanup in Windows Server using DISM is one of the most popular posts here on Saotn.org. It is still valid for Windows Server 2016 and up. So apparently, disk space usage is an issue in Windows Server. Which made me wonder: what more ways to clean up disk space in Windows Server are there?

By Jan Reilink 16/08/2016Windows Server

WordPress

SSL in WordPress: how to move WordPress to HTTPS? The definitive guide

Having an SSL certificate in your WordPress is the de-facto standard nowadays, did you know that? Google ranks sites having HTTPS higher in their SERP. But in WordPress, how do you configure an SSL certificate and HTTPS URL? You'll learn the important steps to move WordPress from http to https

By Jan Reilink 15/07/2016WordPress

Windows Server

KMS Migration from 2008 R2 to Windows Server 2012 R2 and KMS Activation Known Issues

How to migratie an Windows Server 2008 R2 KMS to Windows Server 2012 R2, for volume activation of Microsoft products? On a new KMS server? You don't, apparently there is no Windows Server 2008 (R2) KMS to Windows Server 2012 R2 migration. There is no way to automatically transfer your KMS role along with the products its activating to another server. Luckily Charity Shelbourne wrote up a handy how to for this task.

By Jan Reilink 02/06/2016Windows Server

WordPress

17+ Useful WordPress snippets

Here are 17+ valuable WordPress snippets for site-specific plugins and functions.php to provide you a better WordPress experience. Enhance your WordPress site with these small PHP snippets: WordPress filters, actions and functions. Quickly add or extend the functionality you need for your WordPress website! Read on...

By Jan Reilink 30/05/2016WordPress

MySQL

MySQL DoS in the Procedure Analyse Function – CVE-2015-4870

Sri Lankan Security researcher Osanda Malith discovered a DoS -or crash- vulnerability in MySQL's Procedure Analyse Function. The vulnerability crashes MySQL versions up to 5.5.45.

By Jan Reilink 30/05/2016MySQL

Web application security

Binary webshell through OPcache in PHP 7

GoSecure wrote up a new PHP exploitation technique using the default OPcache engine from PHP 7. Using this attack vector, it's possible to bypass certain hardening techniques that disallow the file write access in the web directory.

By Jan Reilink 28/04/2016Web application security

Search results for: security

ASP and ASP.NET connectionstring examples for Microsoft SQL Server and MySQL

Important note about Windows Update KB4056892

Protect WordPress from brute-force XML-RPC attacks

Check WordPress Core files integrity

Intrusion Detection with Windows Event ID’s

Optimized WordPress hosting (9+ practical tips)

WordPress advisory: Akal premium theme XSS vulnerability

5 Extra ways to clean up disk space in Windows Server

SSL in WordPress: how to move WordPress to HTTPS? The definitive guide

KMS Migration from 2008 R2 to Windows Server 2012 R2 and KMS Activation Known Issues

17+ Useful WordPress snippets

MySQL DoS in the Procedure Analyse Function – CVE-2015-4870

Binary webshell through OPcache in PHP 7

Windows Server

Web applications

PowerShell