Windows Server
Block PHP files like sendmail.php on Windows Server IIS webservers. This comes in handy if a websites on your webserver sends out spam and you need to block access to a script on a specific website or globally in IIS. Here are 3 methods.
Umbraco
Last updated:
Add a trailing slash to URL's in Umbraco 8, using IIS URL Rewrite Module, without breaking the Umbraco backend. Forcing one particular URL avoids duplicate content, which is important for SEO.
WordPress
Last updated:
Gzip compress and serve WP-Super-Cache or Cache Enabler static HTML files, to supercharge your WordPress blog!
WordPress
Last updated:
Move WordPress to HTTPS correctly. Learn the Site Health switch, database search and replace, IIS/Apache redirects, HSTS hardening, and OpenSSL verification.
Windows Server
Last updated:
When you start to play with Windows Server 2016 and IIS 10, you'll get an error when you try to install the IIS URL Rewrite Module in IIS. The error occurs because the URL Rewrite Module installer contains an invalid version check for the IIS being used. Here is how to install IIS URL Rewrite Module 2 in IIS 10...
Windows Server
Last updated:
Fix for IIS URL Rewrite Module error "Rewrite Module error: Expression contains a repeat expression"
Windows Server
Last updated:
How to proxy HTTP requests from one IIS web server to another with a RewriteProxy rule in an .htaccess file, handled by Helicon Ape.
Windows Server
Last updated:
Set up HTTP Strict-Transport-Security (HSTS) response header in Windows Server IIS 10, here is some more technical information about HSTS in IIS, and other security headers...
Web applications
Last updated:
How to set up a global Geolocation DNS load balancing Varnish Cache Content Delivery Network with Bind9, geo-ip database, Varnish Cache and DigtalOcean. DIY High-Availability for your website!
WordPress
Last updated:
How to identify, block, mitigate and leverage xmlrpc.php scans, brute-force, and user enumeration attacks on WordPress sites... Secure WordPress xmlprc.php interface and reduce service disruption.
Windows Server
Last updated:
Windows Server IIS loves to tell the world that a website runs on IIS. It does so with the "Server:" header in the HTTP response, as shown below. In this post I'll show you how to remove HTTP response headers in Windows Server IIS. You don't want to give hackers too much information about your servers, right?.
Windows Server
Last updated:
Sometimes it's important to remove (or hide) the file extension of scripts you use. Security by obscurity might be that reason, if you don't want others to know what script language you are using for your website, or for static site hosts.
Windows Server
Last updated:
Gzip compression conflicts with IIS Outbound Rules resulting in HTTP 500.52 URL Rewrite Module Error. Here is how to resolve this.
Windows Server
Last updated:
Use IIS Outbound Rules and URL Rewrite Module to create a custom created Content Delivery Network (CDN) for static content ofloading and speed-up your website.
WordPress
Last updated:
WordPress 3.4 and 3.5 couldn't save permalinks to web.config on IIS 8.0. We found the cause, reported it to WordPress core and it got fixed.
Web applications
Last updated:
The advantage of having your website content hosted on a Content Delivery Network (CDN) is having your content distributed and stored across the Globe. Utilizing the network of the Content Delivery Network provider.
Windows Server
Last updated:
Removing ETag response headers is not an easy task in Windows Server IIS web servers. Here I show you how to properly remove ETag HTTP response headers with an IIS Rewrite Module Outbound rewrite rule.
Windows Server
Last updated:
Learn how to use .htaccess in Windows Server IIS. Before IIS 7 and the URL Rewrite module, you had to rely on third party extensions to IIS for URL rewriting with .htaccess files.