Connect to MySQL from PHP PDO using an SSL encrypted connection
If you want to connect securely to your MySQL database over SSL using PHP Data Objects (PDO), here is how…
(more…)
SSL
SSL (Secure Sockets Layer) and TLS (Transport Layer Security) tag
Windows 10
How to turn off the TLS default in FileZilla?
A short post for my colleagues at the customer support and anyone else wondering the same: how to turn off the FTP over TLS default in FileZilla?
WordPress
SSL in WordPress: how to move WordPress to HTTPS? The definitive guide
Having an SSL certificate in your WordPress is the de-facto standard nowadays, did you know that? Google ranks sites having HTTPS higher in their SERP. But in WordPress, how do you configure an SSL certificate and HTTPS URL? You’ll learn the important steps to move WordPress from http to https in this post.
(more…)Code base
Send authenticated email over TLS from Zen Cart
Zen Cart is an open source shopping cart software. Unfortunately, Zen Cart has had some difficulties in the past sending authenticated SMTP email from a website. Here is how to let Zen Cart send email over an encrypted TLS connection, when the following condition is met: StartTLS is required. Since Zen Cart v1.5.2 StartTLS support is available.
GNU Linux
Monit monitoring on Ubuntu 14.04 VM on Hyper-V
Monit monitoring for websites and services, on an Ubuntu 14.04 LTS VM, hosted on a Windows Server 2012 R2 or Windows 8.1 Hyper-V. This post is about setting up a Monit monitoring service. Monit is a free and open source service monitoring application which can perform various event-based actions. Monit can send email notifications, restart a service or application, or take other responsive actions. We set Monit up on a Ubuntu 14.04 VM, built on Hyper-V. And we use Monit to monitor several websites, and send out notifications on downtime.
Code base
PHP script to check website availability with PHP/cURL
Here you’ll find a PHP script to check a website’s is online availability with PHP and cURL. The following PHP function checks if your website is online available or not. Website uptime and availability is important and you want your website to be always online available. When your website is down, you want to be notified about the downtime.
(more…)WordPress Security
Send authenticated SMTP email over TLS from WordPress
How to configure TLS for SMTP email in WordPress. I was suprised WordPress is not able to send email using an SMTP server out-of-the-box. Not to mention using authenticated SMTP or TLS transport for security. A quick Google search showed me multiple plugins to handle this, but I wanted to create something myself. Here is how to override the wp-mail() function and send email using authenticated SMTP and StartTLS from WordPress.
Windows Server
Send email with Ghost using SMTP authentication and TLS encryption
Ghost Publishing platform uses Nodemailer to send e-mails with Node.js. It can send e-mail using SMTP, sendmail or Amazon SES and is unicode friendly.
Security
How to test SMTP Authentication and StartTLS
How to test SMTP authentication and StartTLS using the command line?
When investigating SMTP authentication issues, particular over TLS encrypted SMTP connections, it’s always handy if you are able to test the SMTP authentication and StartTLS connection. Preferably from your command line. This post shows you how to test SMTP servers, verify SMTP authentication and StartTLS encrypted connections from the Linux and Windows command line.
(more…)Windows Server
Information about HeartBleed and IIS
Information about HeartBleed and IIS. Via Erez’s IIS Blog:
GNU Linux
Redirect HTTP to HTTPS on Apache 2.4
A permanent redirect in Apache using status code 301
The last few day’s I’ve been toying with Nagios, setting up a monitoring system. An Apache redirect to HTTPS was one of the tasks I wanted to accomplish. This would redirect the Nagios vhost from HTTP to HTTPS using an Apache 2.4.6 VirtualHost, and no resource expensive rewrite would be necessary.
(more…)