1
vote
0answers
43 views

Apache 2.4/PHP-FPM ProxyPassMatch and access restriction

I've got Apache/PHP setup exactly like this: https://wiki.apache.org/httpd/PHP-FPM It includes the ProxyPassMatch rule as mentioned: ProxyPassMatch ^/(.*\.php)$ ...
5
votes
1answer
101 views

How to minimise effect of mischievous, persistent POST requests

For a few months now one of our shared hosting servers has been persistently and constantly hammered by "POST /" requests from what must be hundreds of thousands of individual IPs. On a number of ...
2
votes
1answer
166 views

apache httpd keep sending http requests to strange IPs

Recently I noticed my server keeps sending data to strange location "121.11.76.48" by netstat -na . To find out what it is sending , I tried : tcpdump -i eth0 host 121.11.76.48 -nnvvXSs 1514 And ...
0
votes
1answer
62 views

Modrewrite - Redirect Apache Sequence Codes To Prevent Injection?

I recently noticed that some people accidentally will use special characters at the end of a URL to link to a site. Example: .html%C2%A0 Some people will also try to inject escape sequences like ...
0
votes
1answer
112 views

Mirroring my website through a secure subdomain

Attempting to get my site to comply with the limitations of an edge content delivery network, I have been forced to push my security certificate root from https://www.mysite.com to the subdomain ...
2
votes
3answers
6k views

Returning “200 OK” in Apache on HTTP OPTIONS requests

I'm attempting to implement cross-domain HTTP access control without touching any code. I've got my Apache(2) server returning the correct Access Control headers with this block: Header set ...
1
vote
1answer
3k views

How to use max_post_size and upload_max_filesize in an Apache <Location> directive?

My users want to upload large files (50-100MB) in the CMS backend of a PHP web application. I could adjust the upload_max_filesize and post_max_size settings for PHP globally in this virtual host, but ...
1
vote
2answers
378 views

.htaccess redirect - Is it secure?

This works; I'm not having trouble, but I want to be certain that this is bulletproof. I came up with a neat little .htaccess redirect, but I am not sure if it is secure; do you know? <IfModule ...
19
votes
3answers
518 views

Suspicious .htaccess File

This was uploaded to one of my FTP folders. I'm not familiar with Apache, but still curious - can someone tell me what type of dastardly act this file is trying to commit? Thanks! RewriteEngine On ...