How to identify, block, mitigate and leverage xmlrpc.php scans, brute-force, and user enumeration attacks on WordPress sites… Secure WordPress xmlprc.php interface and reduce service disruption.
Windows Server IIS loves to tell the world that a website runs on IIS. It does so with the “Server:” header in the HTTP response, as shown below. In this post I’ll show you how to remove HTTP response headers in Windows Server IIS. You don’t want to give hackers too much information about your servers, right?.
Learn how to speed-up Joomla performance on Windows Server IIS using these 8 simple, but important, tips. Add caching, gzip compression, set your sessions & optimize MySQL database functions.
Converting MyISAM tables to InnoDB for more database performance, because: 1) MyISAM is old and no longer developed, and 2) InnoDB is much faster.
Sometimes it’s important to remove (or hide) the file extension of scripts you use. Security by obscurity might be that reason, if you don’t want others to know what script language you are using for your website, or for static site hosts.
Investigate SMTP authentication issues like a boss! When using TLS encrypted SMTP connections, it’s always handy if you are able to create a SMTP logon credentials and test SMTP authentication over a TLS/StartTLS connection. Preferably from your command-prompt.
The less spammers hit your WordPress blog, the better your blog performs, is one of my opinions. A second is, the less unnecessary plugins you use on your WordPress blog, the better. So, a little while ago I decided to remove plugins like Stop Spammer Registration Plugin and do its work myself.
Fix “System.Net.WebException: The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel.” in ASP.NET on IIS
Learn how to fix your PHP config instead of turning off CURLOPT_SSL_VERIFYPEER in php.ini and overcome certificate validation errors with cURL and PHP.
How to use GnuWin32 ported tools like grep.exe and find.exe for forensic log file analysis in Windows Server. Find webshells and backdoors in websites, check visitor’s IP addresses or hits to backdoor/webshell files in IIS log files easy. Command-line log analysis in Windows Server, search for Joomla-, WordPress-, Drupal- and PHP- malware & backdoors in your website with grep and find.
In this post I provide you various HTTP to HTTPS redirection methods, for Windows Server IIS and Linux Apache. Use these examples to your advantage to secure the traffic between your visitors and your website.
How to let MySQL Connector/NET and Entity Framework play nicely. This blog post is a quicky and an oldy… Since we still receive a reasonable amount of questions about this topic at the customer service of my employer I’m posting this here, with some commonly made mistakes and points of attention.
This post describes some of the IIS URL Rewrite Module web.config equivalents of commonly used Apache .htaccess settings. You’ll learn how to translate .htaccess content to IIS web.config, this is useful when you need to migrate your website from Apache to Windows Server IIS.
The length of the URL for this request exceeds the configured maxUrlLength value is an IIS error telling you the length of the given URL exceeds a limit (…).
Block and filter unwanted web HTTP traffic with blocklists, on both IIS and Apache. Protect your website easily with this PHP blocklist class. Create your own HTTP web blocklist filter.
How to use MySQL Connector/NET 6.5 with MySqlClientPermission Class in partial (medium) trust
.htaccess to secure your website: 7 snippets to secure your website using .htaccess files as a kind of Web Application Firewall (WAF).
It’s possible to restrict System.Net.SocketPermission, for example, for an external MySQL connection. Here is your “Granting limited SocketPermission in ASP.NET 2.0 medium trust” how-to.
The “SendUsing” configuration value is invalid is an error message indicating an issue with IIS SMTP Service configuration. Here is how to resolve this issue.