Questions tagged [web-applications]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
30 votes
6 answers
29k views

Why do 'hackers' setup bots repeatedly fill out web forms?

There is something I don't get, one of my web apps has a small form that allows you to enter you name and email address to "subscribe" to a user list for a site I maintain. The site is very low ...
EJB's user avatar
  • 1,319
20 votes
14 answers
4k views

Should I force my users to change passwords every n days/weeks/month?

Question says it all. We are designing a system where security is very important. One of the ideas someone had was to force users to change passwords every 3 months. My take on this is that while its ...
Iznogood's user avatar
  • 320
20 votes
18 answers
8k views

What are some good web based trouble ticket systems?

I'm looking for a trouble ticket system so that I can track issues for various customers. I used one before at my previous employer but it wasn't anything too great. I'm wondering which ones you would ...
kovert's user avatar
  • 437
19 votes
8 answers
3k views

Software http load balancer?

Right now we only have one back-end server per site/web service. I'd be interested to hear people's experiences with various load balancer apps (something that runs on Linux). What would you ...
Mark Renouf's user avatar
  • 1,373
15 votes
6 answers
4k views

Who is responsible for maintaining IIS for web apps?

IIS/Web Applications has been a tricky issue in the shops I've worked in over time. On one hand, IIS is a service built into the server (by in large) and is typically the responsibility of the server ...
Dillie-O's user avatar
  • 531
14 votes
7 answers
14k views

How do I set up a web server out of my home? [closed]

I want to run a web server from home, so my family, and clients can see what I am doing. It would not run a large load, at most 2 or 3 users at a time. I would like to know how to do it with a ...
David Basarab's user avatar
14 votes
8 answers
35k views

Is using integrated security (SSPI) for accessing SQL Server better for web applications?

When deploying web applications (.net) to a production environment, is it better to use integrated security or does it even matter? It seems to me that if a hacker breaks the web server, it won't ...
NotMe's user avatar
  • 3,782
14 votes
3 answers
27k views

What are perfect unix permissions for usual web project directories?

What are the perfect minimal permissions in octal format for the followings in a web application written? A directory where user uploaded static files (images/swf/js files) will reside A directory ...
user893730's user avatar
12 votes
1 answer
26k views

Reverse proxy application and its static files with Nginx

I am trying to do something that seems to me very simple but I must be stupid or miss something very obvious because I cannot figure it out. I want to access the multiple web applications running on ...
aallrd's user avatar
  • 291
12 votes
2 answers
982 views

improve our deployment strategy

We have an ecommerce app that we develop at our company. Its a reasonably standard LAMP application that we have been developing on and off for about 3 years. We develop the application on a testing ...
robjmills's user avatar
  • 990
11 votes
2 answers
2k views

What is a secure and user-friendly way to provide only a few users access to web app on Amazon EC2?

Situation We have a web app hosted on Amazon EC2. It's intended to be used only by a few users in a company. How we're dealing with this We share the (Elastic) IP address of the instance with the ...
m01010011's user avatar
  • 211
11 votes
1 answer
17k views

Restart a single tomcat 7 webapp at a specific time?

Tomcat 7 is running on a Windows System. I need to restart one of the deployed web applications each day at a specific time. Is there an option to do that via script or (even better) does tomcat offer ...
jalu's user avatar
  • 113
10 votes
10 answers
3k views

How do you deploy your .NET Web Application? (Recommendations, please!)

We've recently upgraded our ASP.NET Website to a Web Application and we're shocked by the sudden leap in difficulty when deploying it. Considering how common a task this must be, I was wondering what ...
Django Reinhardt's user avatar
10 votes
4 answers
41k views

Equivalent of phpMyAdmin for MSSQL?

Is there any webinterface for administrating MSSQL similar to phpMyAdmin (for MySQL)? I want a self-service setup where developers can create a database through webinterface and upload/download ...
Tedd Hansen's user avatar
9 votes
2 answers
28k views

Tomcat 9 - catalina.out log file missing and console printouts are not shown anywhere

Tomcat9 deployed on Ubuntu 18.04. This issue ONLY applies to Tomcat version 9. There is a catalina.date.log file present in the logs folder but it does NOT show any console printouts from our web ...
Lucian's user avatar
  • 93
9 votes
1 answer
4k views

What causes a 400 Bad Request error for null ("") and why would our nginx logs have so many?

Daily logs from Logwatch regularly report 400 Bad Request, null: 1744 Time(s) from our nginx logs. The log entries look like: 123.123.123.123 - - [25/Jan/2011:14:44:19 -0500] "-" 400 173 "-" "-" ...
johnml's user avatar
  • 203
8 votes
3 answers
3k views

Enterprise internal URL conventions

developer here... I'd like your IT perspective on this one... I'm building a new internal web app for my company, and starting to think about how it will be deployed. Many of the existing web apps ...
Ben Brandt's user avatar
8 votes
6 answers
2k views

Web application to manage software distribution

I'm the IT guy for a small software development company. We have software that is downloadable by customers that purchased a license via our web site. I'm trying to find a solution to better manage ...
Josh's user avatar
  • 113
7 votes
1 answer
12k views

Nginx : strip header on HTTP, add header on HTTPS

I'm configuring an Nginx server so as to serve as a reverse proxy to serve a Django app (run on Gunicorn). My problem is that I want my site secured with HTTPS, and so I want my Django app to be able ...
Thomas Orozco's user avatar
7 votes
3 answers
2k views

Web application deployment : one version for all clients or each his own

I have a general question about software deployment. At work, we design a CRM that is used through web browsers. I've recently been told that each specific client has its own server (although the ...
Shirraz's user avatar
  • 73
7 votes
1 answer
4k views

Is there a need for WAF in static website front with REST API?

I have two webistes www.mysite.com. -->hosted on s3 , served via Cloudfront static single page App. Then I have api.mysite.com , which the front end uses. My company is using WAF solution from ...
Master's user avatar
  • 105
7 votes
2 answers
36k views

In Apache how to define multiple ProxyPass to different servers with the same context-root?

** updated with workaround at bottom of this answer ** I have a requirement for my webapp to proxy to 2 external reporting servers. So I will have a menu-item for each external reporting server. But ...
gotjee's user avatar
  • 89
6 votes
2 answers
356 views

Cloud infrastructure for home and personal experimentation? [closed]

As with many techies-- I've accumulated a number of older x86 servers, x86 desktops, and Cisco switches over the last few years. I'd like to build a small cloud cluster for web app experiments (web ...
crftr's user avatar
  • 177
6 votes
3 answers
14k views

Apache2 reverse proxy seems to intermittently freeze?

Apache2 reverse proxy seems to intermittently freeze when proxying a tomcat web app. The problem is that every so often (once or twice a day usually after inactivity) when I try to log into this ...
tinny's user avatar
  • 511
6 votes
3 answers
664 views

Hosted form of web-based file transfer tools [closed]

I'm looking for some software that will provide a service that resembles SendThisFile.com. My users generally turn to services like these when they are trying to send files that exceed the mail ...
Tim 's user avatar
  • 231
5 votes
7 answers
4k views

Web Application Vulnerability Scanner suggestions? [closed]

I'm looking for a new tool for the ol' admin toolkit and would value some suggestions. I would like to do some "automated" testing of handful of websites for XSS (cross site scripting) vulns, along ...
5 votes
5 answers
22k views

Load balancing based on session cookie?

I have a web app that is going to run on multiple servers. I'd like to make sure, that requests using the same session (HTTP cookie header with value JSESSIONID=x) always communicate with the same ...
Chris Lercher's user avatar
5 votes
3 answers
12k views

Naming convention for databases and database users for access by a web application?

When installing a web application where a single user is used to talk to a single database (say MySQL, but this could apply to other RDBMSes also), you often have a sequence of events such as this: ...
crb's user avatar
  • 8,008
5 votes
2 answers
5k views

What are the best strategies for scaling up my web application to be able to cope with a large volume of users?

I want to get some advice / best practices for how to go about developing a strategy for scaling up my a web application. I waffle on a bit here and show my limited knowledge but want to fill in my ...
undefined's user avatar
  • 654
5 votes
3 answers
410 views

How would I recognize the "spoon-feeding problem" on a dynamic webapp server?

The "spoon-feeding problem", as it was recently explained to me, happens when connections to your application server are tied up feeding data across slow network connections to your clients. This ...
Don Spaulding's user avatar
5 votes
2 answers
2k views

Active Directory Web-based Front-End

I'm in search for a nice web front end to a medium sized active directory. The main use case is to automate tasks that can't be done with copy from templates (things like assigning proper UNIX ...
pfo's user avatar
  • 5,708
5 votes
2 answers
13k views

keepass web interface [closed]

I'm just getting started with Keepass http://keepass.info/ as a password database. It works great as an standalone application. The problem I'm having is when I am with out MY computer or USB key ...
Steven Smethurst's user avatar
5 votes
10 answers
15k views

IIS6: How to troubleshoot a 404 error in an ASP.NET application?

I have an ASP.NET application on a Windows Server 2003/IIS6 that refuses to run for some reason (it's the Xerox Centre, if that info helps). It has been working flawlessly before though on this server....
Tomalak's user avatar
  • 1,605
5 votes
2 answers
4k views

IIS Application Initialization isn't running even though all settings are configured

The end goal is to make it so that whenever my app pool is recycled (which should happen whenever I release an update for the site), my site gets visited once to "warm up". Typically the first visit ...
Coder7862396's user avatar
4 votes
5 answers
593 views

Mitigating the 'firesheep' attack at the network layer?

What are the sysadmin's thoughts on mitigating the 'firesheep' attack for servers they manage? Firesheep is a new firefox extension that allows anyone who installs it to sidejack session it can ...
pobk's user avatar
  • 275
4 votes
3 answers
415 views

Why shouldn't I serve my Java webapp directly with Tomcat?

I have heard several times that one should not serve a Java webapp directly to the outside world from the Tomcat server it is running on. Rather, one should have a regular web server in between -- e....
user avatar
4 votes
1 answer
2k views

how does a web application cope with thousands of requests?

I went to a few websites and noticed that they all use AJAX technology for many tasks such as chat, messages, and so forth. They use a lot of httprequests obviously. My question is if you build a ...
netrox's user avatar
  • 171
4 votes
1 answer
3k views

Where is the best location for an app made ​​in NodeJS on a server?

For some time I am developing an application in Nodejs. And I asked where in the Linux file system on a server was the best place to leave it running. Since PHP5 and Apache2 is in /var/www , and ...
AlejoNext's user avatar
4 votes
3 answers
2k views

Best practices to update a live web service

I am always curious about how large-scale live web application updates are done. Since the application is live, that is why it complicates everything -you should not down your service and at the same ...
israkir's user avatar
  • 141
4 votes
5 answers
4k views

Intranet music web application for an office media server?

My office is thinking of setting up a media server with speakers connected to it so that everyone in our office can queue up music via a web app. Right now we just pass around a speaker cable. I'd ...
Chad Johnson's user avatar
4 votes
1 answer
3k views

Restart Systemd unit after dependency

I have a web application that is started by systemd. It uses Postgresql as database, so it rely on it. Here is the unit file of my web application (I have remove the un-relevant/sensitive parts): [...
Antoine's user avatar
  • 143
4 votes
2 answers
7k views

Http-Only cookies in WebLogic: what versions support them/how and why are they supported?

We want to make all cookies set by our webapp http-only. I only have a basic understanding of the benefits of doing this but I'm told by security people that it's a Good Thing (tm) Our app is running ...
user avatar
4 votes
3 answers
515 views

Webapp for secure file delivery to customers?

Situation: For each customer, I have a script that generates some customized configuration files for their installation (host addresses, options, organization names, etc.) I need to get these to the ...
andersop's user avatar
  • 181
4 votes
4 answers
274 views

App Pool limitations

We currently have about 600 .net sites in a single app pool. We're starting to get out of memory exceptions and have to recycle the app pool to fix the problem. I know it's generally a good idea to ...
user avatar
4 votes
0 answers
2k views

Best way to add "Virtual Path" to application running inside docker container

Current Situation I have 2 applications running inside Docker Container, one is an angular app and the other is a .Net Core WebApi. Each one has a binded port, (WebApi is running on 8090 host port, ...
sathoril's user avatar
3 votes
3 answers
3k views

What are the best browser based administration tools for Linux?

Looking for recommendations the best comprehensive browser based administration tool for administering a Linux machine. Ideally this would be distribution agnostic. This could also be an "appliance" ...
3 votes
2 answers
715 views

How to protect a web application from IPv6 bots?

I'm interested in this in the context of protecting a web application from bots, but I guess it applies to all kind of attacks that can be done over IPv6 by bots. In a web application, you have some ...
John Smith Optional's user avatar
3 votes
3 answers
223 views

How to prevent discovery of a secure URL?

If I have a url that is used for getting messages and I create it like so: http://www.mydomain.com/somelonghash123456etcetc and this URL allows for other services to POST messages to. Is it possible ...
lamp_scaler's user avatar
3 votes
3 answers
1k views

How to test web application performance from other continent?

We are hosting our web application http://timr.com on a server located in Germany. The server handles a high load of traffic very well and everything works as desired in terms of performance and load ...
Thomas Einwaller's user avatar
3 votes
1 answer
5k views

Azure Web App vs Web Site

I am just starting to learn about Azure and I understand the difference between Web Sites, Cloud Services and VM's. However in my Azure portal I can only see Web Apps and not Web Sites. Is this the ...
Pierre's user avatar
  • 133

1
2 3 4 5
8