Questions tagged [web-applications]
The web-applications tag has no usage guidance.
374
questions
30
votes
6
answers
29k
views
Why do 'hackers' setup bots repeatedly fill out web forms?
There is something I don't get, one of my web apps has a small form that allows you to enter you name and email address to "subscribe" to a user list for a site I maintain. The site is very low ...
20
votes
14
answers
4k
views
Should I force my users to change passwords every n days/weeks/month?
Question says it all. We are designing a system where security is very important. One of the ideas someone had was to force users to change passwords every 3 months. My take on this is that while its ...
20
votes
18
answers
8k
views
What are some good web based trouble ticket systems?
I'm looking for a trouble ticket system so that I can track issues for various customers. I used one before at my previous employer but it wasn't anything too great. I'm wondering which ones you would ...
19
votes
8
answers
3k
views
Software http load balancer?
Right now we only have one back-end server per site/web service. I'd be interested to hear people's experiences with various load balancer apps (something that runs on Linux).
What would you ...
15
votes
6
answers
4k
views
Who is responsible for maintaining IIS for web apps?
IIS/Web Applications has been a tricky issue in the shops I've worked in over time.
On one hand, IIS is a service built into the server (by in large) and is typically the responsibility of the server ...
14
votes
7
answers
14k
views
How do I set up a web server out of my home? [closed]
I want to run a web server from home, so my family, and clients can see what I am doing. It would not run a large load, at most 2 or 3 users at a time.
I would like to know how to do it with a ...
14
votes
8
answers
35k
views
Is using integrated security (SSPI) for accessing SQL Server better for web applications?
When deploying web applications (.net) to a production environment, is it better to use integrated security or does it even matter?
It seems to me that if a hacker breaks the web server, it won't ...
14
votes
3
answers
27k
views
What are perfect unix permissions for usual web project directories?
What are the perfect minimal permissions in octal format for the followings in a web application written?
A directory where user uploaded static files (images/swf/js files) will reside
A directory ...
12
votes
1
answer
26k
views
Reverse proxy application and its static files with Nginx
I am trying to do something that seems to me very simple but I must be stupid or miss something very obvious because I cannot figure it out.
I want to access the multiple web applications running on ...
12
votes
2
answers
982
views
improve our deployment strategy
We have an ecommerce app that we develop at our company. Its a reasonably standard LAMP application that we have been developing on and off for about 3 years. We develop the application on a testing ...
11
votes
2
answers
2k
views
What is a secure and user-friendly way to provide only a few users access to web app on Amazon EC2?
Situation
We have a web app hosted on Amazon EC2. It's intended to be used only by a few users in a company.
How we're dealing with this
We share the (Elastic) IP address of the instance with the ...
11
votes
1
answer
17k
views
Restart a single tomcat 7 webapp at a specific time?
Tomcat 7 is running on a Windows System. I need to restart one of the deployed web applications each day at a specific time.
Is there an option to do that via script or (even better) does tomcat offer ...
10
votes
10
answers
3k
views
How do you deploy your .NET Web Application? (Recommendations, please!)
We've recently upgraded our ASP.NET Website to a Web Application and we're shocked by the sudden leap in difficulty when deploying it. Considering how common a task this must be, I was wondering what ...
10
votes
4
answers
41k
views
Equivalent of phpMyAdmin for MSSQL?
Is there any webinterface for administrating MSSQL similar to phpMyAdmin (for MySQL)?
I want a self-service setup where developers can create a database through webinterface and upload/download ...
9
votes
2
answers
28k
views
Tomcat 9 - catalina.out log file missing and console printouts are not shown anywhere
Tomcat9 deployed on Ubuntu 18.04. This issue ONLY applies to Tomcat version 9. There is a catalina.date.log file present in the logs folder but it does NOT show any console printouts from our web ...
9
votes
1
answer
4k
views
What causes a 400 Bad Request error for null ("") and why would our nginx logs have so many?
Daily logs from Logwatch regularly report 400 Bad Request, null: 1744 Time(s) from our nginx logs.
The log entries look like:
123.123.123.123 - - [25/Jan/2011:14:44:19 -0500] "-" 400 173 "-" "-"
...
8
votes
3
answers
3k
views
Enterprise internal URL conventions
developer here... I'd like your IT perspective on this one...
I'm building a new internal web app for my company, and starting to think about how it will be deployed. Many of the existing web apps ...
8
votes
6
answers
2k
views
Web application to manage software distribution
I'm the IT guy for a small software development company. We have software that is downloadable by customers that purchased a license via our web site. I'm trying to find a solution to better manage ...
7
votes
1
answer
12k
views
Nginx : strip header on HTTP, add header on HTTPS
I'm configuring an Nginx server so as to serve as a reverse proxy to serve a Django app (run on Gunicorn).
My problem is that I want my site secured with HTTPS, and so I want my Django app to be able ...
7
votes
3
answers
2k
views
Web application deployment : one version for all clients or each his own
I have a general question about software deployment. At work, we design a CRM that is used through web browsers. I've recently been told that each specific client has its own server (although the ...
7
votes
1
answer
4k
views
Is there a need for WAF in static website front with REST API?
I have two webistes
www.mysite.com. -->hosted on s3 , served via Cloudfront static single page App.
Then I have api.mysite.com , which the front end uses.
My company is using WAF solution from ...
7
votes
2
answers
36k
views
In Apache how to define multiple ProxyPass to different servers with the same context-root?
** updated with workaround at bottom of this answer **
I have a requirement for my webapp to proxy to 2 external reporting servers.
So I will have a menu-item for each external reporting server.
But ...
6
votes
2
answers
356
views
Cloud infrastructure for home and personal experimentation? [closed]
As with many techies-- I've accumulated a number of older x86 servers, x86 desktops, and Cisco switches over the last few years.
I'd like to build a small cloud cluster for web app experiments (web ...
6
votes
3
answers
14k
views
Apache2 reverse proxy seems to intermittently freeze?
Apache2 reverse proxy seems to intermittently freeze when proxying a tomcat web app.
The problem is that every so often (once or twice a day usually after inactivity) when I try to log into this ...
6
votes
3
answers
664
views
Hosted form of web-based file transfer tools [closed]
I'm looking for some software that will provide a service that resembles SendThisFile.com. My users generally turn to services like these when they are trying to send files that exceed the mail ...
5
votes
7
answers
4k
views
Web Application Vulnerability Scanner suggestions? [closed]
I'm looking for a new tool for the ol' admin toolkit and would value some suggestions.
I would like to do some "automated" testing of handful of websites for XSS (cross site scripting) vulns, along ...
5
votes
5
answers
22k
views
Load balancing based on session cookie?
I have a web app that is going to run on multiple servers. I'd like to make sure, that requests using the same session (HTTP cookie header with value JSESSIONID=x) always communicate with the same ...
5
votes
3
answers
12k
views
Naming convention for databases and database users for access by a web application?
When installing a web application where a single user is used to talk to a single database (say MySQL, but this could apply to other RDBMSes also), you often have a sequence of events such as this:
...
5
votes
2
answers
5k
views
What are the best strategies for scaling up my web application to be able to cope with a large volume of users?
I want to get some advice / best practices for how to go about developing a strategy for scaling up my a web application. I waffle on a bit here and show my limited knowledge but want to fill in my ...
5
votes
3
answers
410
views
How would I recognize the "spoon-feeding problem" on a dynamic webapp server?
The "spoon-feeding problem", as it was recently explained to me, happens when connections to your application server are tied up feeding data across slow network connections to your clients. This ...
5
votes
2
answers
2k
views
Active Directory Web-based Front-End
I'm in search for a nice web front end to a medium sized active directory. The main use case is to automate tasks that can't be done with copy from templates (things like assigning proper UNIX ...
5
votes
2
answers
13k
views
keepass web interface [closed]
I'm just getting started with Keepass http://keepass.info/ as a password database. It works great as an standalone application.
The problem I'm having is when I am with out MY computer or USB key ...
5
votes
10
answers
15k
views
IIS6: How to troubleshoot a 404 error in an ASP.NET application?
I have an ASP.NET application on a Windows Server 2003/IIS6 that refuses to run for some reason (it's the Xerox Centre, if that info helps). It has been working flawlessly before though on this server....
5
votes
2
answers
4k
views
IIS Application Initialization isn't running even though all settings are configured
The end goal is to make it so that whenever my app pool is recycled (which should happen whenever I release an update for the site), my site gets visited once to "warm up". Typically the first visit ...
4
votes
5
answers
593
views
Mitigating the 'firesheep' attack at the network layer?
What are the sysadmin's thoughts on mitigating the 'firesheep' attack for servers they manage?
Firesheep is a new firefox extension that allows anyone who installs it to sidejack session it can ...
4
votes
3
answers
415
views
Why shouldn't I serve my Java webapp directly with Tomcat?
I have heard several times that one should not serve a Java webapp directly to the outside world from the Tomcat server it is running on. Rather, one should have a regular web server in between -- e....
4
votes
1
answer
2k
views
how does a web application cope with thousands of requests?
I went to a few websites and noticed that they all use AJAX technology for many tasks such as chat, messages, and so forth. They use a lot of httprequests obviously. My question is if you build a ...
4
votes
1
answer
3k
views
Where is the best location for an app made in NodeJS on a server?
For some time I am developing an application in Nodejs. And I asked where in the Linux file system on a server was the best place to leave it running. Since PHP5 and Apache2 is in /var/www , and ...
4
votes
3
answers
2k
views
Best practices to update a live web service
I am always curious about how large-scale live web application updates are done. Since the application is live, that is why it complicates everything -you should not down your service and at the same ...
4
votes
5
answers
4k
views
Intranet music web application for an office media server?
My office is thinking of setting up a media server with speakers connected to it so that everyone in our office can queue up music via a web app. Right now we just pass around a speaker cable. I'd ...
4
votes
1
answer
3k
views
Restart Systemd unit after dependency
I have a web application that is started by systemd. It uses Postgresql as database, so it rely on it. Here is the unit file of my web application (I have remove the un-relevant/sensitive parts):
[...
4
votes
2
answers
7k
views
Http-Only cookies in WebLogic: what versions support them/how and why are they supported?
We want to make all cookies set by our webapp http-only. I only have a basic understanding of the benefits of doing this but I'm told by security people that it's a Good Thing (tm) Our app is running ...
4
votes
3
answers
515
views
Webapp for secure file delivery to customers?
Situation:
For each customer, I have a script that generates some customized configuration files for their installation (host addresses, options, organization names, etc.) I need to get these to the ...
4
votes
4
answers
274
views
App Pool limitations
We currently have about 600 .net sites in a single app pool. We're starting to get out of memory exceptions and have to recycle the app pool to fix the problem.
I know it's generally a good idea to ...
4
votes
0
answers
2k
views
Best way to add "Virtual Path" to application running inside docker container
Current Situation
I have 2 applications running inside Docker Container, one is an angular app and the other is a .Net Core WebApi. Each one has a binded port, (WebApi is running on 8090 host port, ...
3
votes
3
answers
3k
views
What are the best browser based administration tools for Linux?
Looking for recommendations the best comprehensive browser based administration tool for administering a Linux machine. Ideally this would be distribution agnostic. This could also be an "appliance" ...
3
votes
2
answers
715
views
How to protect a web application from IPv6 bots?
I'm interested in this in the context of protecting a web application from bots, but I guess it applies to all kind of attacks that can be done over IPv6 by bots.
In a web application, you have some ...
3
votes
3
answers
223
views
How to prevent discovery of a secure URL?
If I have a url that is used for getting messages and I create it like so: http://www.mydomain.com/somelonghash123456etcetc and this URL allows for other services to POST messages to. Is it possible ...
3
votes
3
answers
1k
views
How to test web application performance from other continent?
We are hosting our web application http://timr.com on a server located in Germany. The server handles a high load of traffic very well and everything works as desired in terms of performance and load ...
3
votes
1
answer
5k
views
Azure Web App vs Web Site
I am just starting to learn about Azure and I understand the difference between Web Sites, Cloud Services and VM's.
However in my Azure portal I can only see Web Apps and not Web Sites. Is this the ...