Magic quotes is a module of php which was implemented in older versions of PHP. In latest versions, the module is depreciated. It is for the purpose of processing of escaping special characters with a ‘\’ to allow a string to be entered into a database. There are three magic quote directives: magic_quotes_gpc :- Affects HTTP Request data (GET, POST, and COOKIE). Cannot be set at runtime, and defaults to on in PHP. magic_quotes_runtime:- If enabled, most functions that return data from an external source, including databases and text files, will have quotes escaped with a backslash. Can be set at runtime, and defaults to off in PHP. magic_quotes_sybase :- If enabled, a single-quote is escaped with a single-quote instead …
‘rncd : connection failed : connection refused’ is a common error occurred in cpanel. Inorder to get the name servers work properly we need to eliminate this error. Elimination of this error is a simple process which takes only a few minutes via cPanel /scripts.. The steps to solve the issue is as follows : 1. Login to your server as root via SSH 2. Run: /scripts/updatenow 3. Run: /scripts/fixrndc The above steps should fix most of the cases, but if it does not, do follow the following steps : 1. Login to your server as root via SSH 2. Run: vi /etc/rndc.conf (or vi /etc/namedb/rndc.conf on FreeBSD) replace all instances of “rndc-key” with “rndckey” 3. Run: vi /etc/named.conf (or …
First we need to identify failed RAID Arrays. we can gather information from the following command’s output. # cat /proc/mdstat Removing the failed partition and disk # mdadm –manage /dev/md0 –remove /dev/sdb1 => Power down # shutdown -h now Then replace the drive and power up In order to use the new drive we should have to create the same partition table structure that was on the old One. # sfdisk -d /dev/sda | sfdisk /dev/sdb After that we can add the partitions to the RAID Array. # mdadm –manage /dev/md0 –add /dev/sdb1 Now, we can check the status of the partitions by issuing # cat /proc/mdstat First we need to identify failed RAID Arrays. we can gather information from …
.htaccess (hypertext access) is the default name of directory-level configuration file that provides decentralized management of configuration while inside your web tree. .htaccess files are often used for security restrictions on a particular directory. So it is very important to secure .htaccess. 1. Add the following code into the .htaccess files. # STRONG HTACCESS PROTECTION order allow,deny deny from all satisfy all 2. Secure your config.php by adding the follwoing # protect wp-config.php Order deny,allow Deny from all 3. Prevent hacker from browsing your directory by adding the code # disable directory browsing Options All -Indexes 4. Prevent script injections. # protect from sql injection Options +FollowSymLinks RewriteEngine On RewriteCond %{QUERY_STRING} (\<|%3C).*script.*(\>|%3E) [NC,OR] RewriteCond %{QUERY_STRING} GLOBALS(=|\[|\%[0-9A-Z]{0,2}) [OR] RewriteCond %{QUERY_STRING} _REQUEST(=|\[|\%[0-9A-Z]{0,2}) …
DNS is a critical component of any network infrastructure. It is responsible for translating domain names into IP addresses, making it a prime target for attackers. A compromised DNS server can lead to traffic redirection, data interception, service downtime, and severe reputation damage. The main objective of securing DNS includes ensuring the secure exchange of data between DNS servers, protecting DNS queries, securing zone transfers, and controlling DNS updates. Strengthening DNS security is a foundational step in overall website and server protection, as discussed in SupportPro’s guide on improving website security In this article, we explain one of the most effective DNS-hardening methods: securing DNS using chroot, along with essential configuration considerations. Before proceeding, ensure that you have taken a …
Check for the current version of apache installed on the server and make sure that the apache development tools have been installed on the server (i.e. httpd-devel package) using the command rpm -qa | grep httpd-devel In case the apache development tools are not installed on the server, install the package via yum yum install httpd-devel The devel package is necessary for addition of extra modules to apache ( since apxs [apache extension tool] comes with httpd-devel. Before installation of mod_security, ensure that the c (apache module) is installed on the server as well. The command httpd -t -D DUMP_MODULES will provide a list of all loaded apache modules. Use httpd -t -D DUMP_MODULES | grep httpd -t -D DUMP_MODULES …
Remote server configuration 1. Edit the /etc/my.cnf file in the remote server and add the following line somewhere under [mysqld] in the my.cnf file bind-address=<IP address of the remote server> 2. Restart mysql on the server Granting privileges for database:: In order to access a database ‘abc’ on the remote server from another machine, we need to add sufficient privileges for a user in the machine from which the connection is made. i.e. from the mysql prompt ( use mysql command or mysql -u root -p to enter the prompt). mysql> grant all privileges on abc.* to username@IP address of the machine from which the connection is to be made identified by <password> Example:: Let us consider two machines with …
As most of the mobile applications used today contain open source, 70% fail to comply with their respective licenses. From a recent survey conducted by OpenLogic, Inc., a leading provider of enterprise open source software support, announced that 71% of Android, iPhone, and iPad apps containing open source failed to comply with basic open source licensing requirements. They scanned 635 leading mobile applications in order to identify open source components and evaluate compliance with the relevant licenses. Applications that contain open source components are required to comply with the rules of all relevant licenses, such as the GPL or Apache license. Applications that fail to comply may be subject to legal action or removal from app stores.Non-compliance with open source …
SSH is a tool for secure remote login over insecure networks. It provides an encrypted terminal session with strong authentication of both the server and client, using public-key cryptography. 1. Use Strong Passwords/Usernames choose passwords that contains: Minimum of 8 characters Mix of upper and lower case letters Mix of letters and numbers Non alphanumeric characters (e.g. special characters such as ! ” $ % ^ etc)
RAID stands for Redundant Array of Inexpensive Disks.The main purpose of raid is to increase logical capacity of storage devices used,improve read/write performance and ensure redundancy in case of a hard disk failure. Raid devices are marked by two letters and a number. Eg. md0,md1,md2. Raid is mostly used in large file servers where data accessibility is higher. Raid unit appears to be equivalent to a single large capacity disk drive. The remarkable benefit of disk array is that if any single disk in the RAID fails, the system and array still continues to function without loss of data. This is possible because the redundancy data is stored on separate disk drives and the RAID can reconstruct the data that was stored on the failed disk drive.