The tag has no wiki summary.

learn more… | top users | synonyms

19
votes
14answers
3k views

Should I force my users to change passwords every n days/weeks/month?

Question says it all. We are designing a system where security is very important. One of the ideas someone had was to force users to change passwords every 3 months. My take on this is that while its ...
15
votes
8answers
9k views

Why do 'hackers' setup bots repeatedly fill out web forms?

There is something I don't get, one of my web apps has a small form that allows you to enter you name and email address to "subscribe" to a user list for a site I maintain. The site is very low ...
14
votes
6answers
1k views

Who is responsible for maintaining IIS for web apps?

IIS/Web Applications has been a tricky issue in the shops I've worked in over time. On one hand, IIS is a service built into the server (by in large) and is typically the responsibility of the server ...
12
votes
2answers
842 views

improve our deployment strategy

We have an ecommerce app that we develop at our company. Its a reasonably standard LAMP application that we have been developing on and off for about 3 years. We develop the application on a testing ...
10
votes
7answers
25k views

Is using integrated security (SSPI) for accessing SQL Server better for web applications?

When deploying web applications (.net) to a production environment, is it better to use integrated security or does it even matter? It seems to me that if a hacker breaks the web server, it won't ...
10
votes
10answers
2k views

How do you deploy your .NET Web Application? (Recommendations, please!)

We've recently upgraded our ASP.NET Website to a Web Application and we're shocked by the sudden leap in difficulty when deploying it. Considering how common a task this must be, I was wondering what ...
8
votes
3answers
543 views

Enterprise internal URL conventions

developer here... I'd like your IT perspective on this one... I'm building a new internal web app for my company, and starting to think about how it will be deployed. Many of the existing web apps ...
8
votes
1answer
1k views

What causes a 400 Bad Request error for null (“”) and why would our nginx logs have so many?

Daily logs from Logwatch regularly report 400 Bad Request, null: 1744 Time(s) from our nginx logs. The log entries look like: 123.123.123.123 - - [25/Jan/2011:14:44:19 -0500] "-" 400 173 "-" "-" ...
8
votes
6answers
664 views

Web application to manage software distribution

I'm the IT guy for a small software development company. We have software that is downloadable by customers that purchased a license via our web site. I'm trying to find a solution to better manage ...
7
votes
1answer
3k views

Restart a single tomcat 7 webapp at a specific time?

Tomcat 7 is running on a Windows System. I need to restart one of the deplyoed web applications each day at a specific time. Is there an option to do that via script or (even better) does tomcat ...
6
votes
1answer
4k views

Nginx : strip header on HTTP, add header on HTTPS

I'm configuring an Nginx server so as to serve as a reverse proxy to serve a Django app (run on Gunicorn). My problem is that I want my site secured with HTTPS, and so I want my Django app to be able ...
6
votes
3answers
628 views

Hosted form of web-based file transfer tools [closed]

I'm looking for some software that will provide a service that resembles SendThisFile.com. My users generally turn to services like these when they are trying to send files that exceed the mail ...
5
votes
2answers
746 views

Active Directory Web-based Front-End

I'm in search for a nice web front end to a medium sized active directory. The main use case is to automate tasks that can't be done with copy from templates (things like assigning proper UNIX ...
5
votes
10answers
10k views

IIS6: How to troubleshoot a 404 error in an ASP.NET application?

I have an ASP.NET application on a Windows Server 2003/IIS6 that refuses to run for some reason (it's the Xerox Centre, if that info helps). It has been working flawlessly before though on this ...
4
votes
7answers
3k views

Web Application Vulnerability Scanner suggestions? [closed]

I'm looking for a new tool for the ol' admin toolkit and would value some suggestions. I would like to do some "automated" testing of handful of websites for XSS (cross site scripting) vulns, along ...
4
votes
3answers
8k views

What are perfect unix permissions for usual web project directories?

What are the perfect minimal permissions in octal format for the followings in a web application written? A directory where user uploaded static files (images/swf/js files) will reside A directory ...
4
votes
5answers
549 views

Mitigating the 'firesheep' attack at the network layer?

What are the sysadmin's thoughts on mitigating the 'firesheep' attack for servers they manage? Firesheep is a new firefox extension that allows anyone who installs it to sidejack session it can ...
4
votes
3answers
212 views

Why shouldn't I serve my Java webapp directly with Tomcat?

I have heard several times that one should not serve a Java webapp directly to the outside world from the Tomcat server it is running on. Rather, one should have a regular web server in between -- ...
4
votes
1answer
708 views

how does a web application cope with thousands of requests?

I went to a few websites and noticed that they all use AJAX technology for many tasks such as chat, messages, and so forth. They use a lot of httprequests obviously. My question is if you build a ...
4
votes
5answers
6k views

Load balancing based on session cookie?

I have a web app that is going to run on multiple servers. I'd like to make sure, that requests using the same session (HTTP cookie header with value JSESSIONID=x) always communicate with the same ...
4
votes
1answer
294 views

Where is the best location for an app made ​​in NodeJS on a server?

For some time I am developing an application in Nodejs. And I asked where in the Linux file system on a server was the best place to leave it running. Since PHP5 and Apache2 is in /var/www , and ...
4
votes
3answers
11k views

Equivalent of phpMyAdmin for MSSQL?

Is there any webinterface for administrating MSSQL similar to phpMyAdmin (for MySQL)? I want a self-service setup where developers can create a database through webinterface and upload/download ...
4
votes
3answers
335 views

Naming convention for databases and database users for access by a web application?

When installing a web application where a single user is used to talk to a single database (say MySQL, but this could apply to other RDBMSes also), you often have a sequence of events such as this: ...
4
votes
3answers
220 views

Best practices to update a live web service

I am always curious about how large-scale live web application updates are done. Since the application is live, that is why it complicates everything -you should not down your service and at the same ...
4
votes
5answers
2k views

Intranet music web application for an office media server?

My office is thinking of setting up a media server with speakers connected to it so that everyone in our office can queue up music via a web app. Right now we just pass around a speaker cable. I'd ...
4
votes
3answers
253 views

How would I recognize the “spoon-feeding problem” on a dynamic webapp server?

The "spoon-feeding problem", as it was recently explained to me, happens when connections to your application server are tied up feeding data across slow network connections to your clients. This ...
4
votes
3answers
470 views

Webapp for secure file delivery to customers?

Situation: For each customer, I have a script that generates some customized configuration files for their installation (host addresses, options, organization names, etc.) I need to get these to the ...
4
votes
4answers
226 views

App Pool limitations

We currently have about 600 .net sites in a single app pool. We're starting to get out of memory exceptions and have to recycle the app pool to fix the problem. I know it's generally a good idea to ...
3
votes
6answers
804 views

Sending emails from a VPS such as EC2

I'm working on deploying a rails site that will be sending emails (checkout confirmations, alerts, etc) from an EC2 server. What are some best practices for doing this successfully? There are two ...
3
votes
3answers
151 views

How to prevent discovery of a secure URL?

If I have a url that is used for getting messages and I create it like so: http://www.mydomain.com/somelonghash123456etcetc and this URL allows for other services to POST messages to. Is it possible ...
3
votes
6answers
4k views

Any Recommendations for a Web Based Large File Transfer System? [closed]

I'm looking for a server software product that: Allows my users to share large files with: The general public securely to 1 or more people (notification via email, optionally with a token that ...
3
votes
2answers
3k views

How do I configure IIS 7 (discount asp.net) to point subdomains at application subdirectories?

I have an discount asp.net account, which uses IIS 7 and I want to configure subdomains to point at specific applications on the site. For instance: 's1.site.com' would run the application at ...
3
votes
3answers
4k views

SSL 2048-bit certs, how to upgrade our web app without breaking legacy API customers?

The Problem SSL certificate providers are moving from certificates signed with 1024–bit RSA keys to the new 2048-bit RSA key standard. One article explaining the background and significance of the ...
3
votes
3answers
2k views

Rename a web application in Sharepoint 2010

If I open Sharepoint Foundation 2010 Central Administration web and select Application Management and click on Manage Applications I can see all my Sharepoint 2010 applications. But How can I rename ...
3
votes
6answers
662 views

Cheap, minimal, robust web application hosting for at least three nines (99.9%) uptime?

How can one achieve the cheapest yet very reliable web application configuration? Let's assume at least 2 application servers for $80/mo plus a DB server will support most people's applications for a ...
3
votes
3answers
285 views

Is there any overhead in setting up multiple web sites in IIS?

One of our server administrators set up 1 web site per web application. This is mainly to have different host headers per application. (We also create DNS entries per application, allowing the web ...
3
votes
4answers
251 views

Use single IP address for farm of servers

I am building an app where I have XX number of customers who can run on a single instance. The application scales out by adding more nodes (thus supporting XX more customers). I want a way to use a ...
3
votes
2answers
4k views

What are the best strategies for scaling up my web application to be able to cope with a large volume of users?

I want to get some advice / best practices for how to go about developing a strategy for scaling up my a web application. I waffle on a bit here and show my limited knowledge but want to fill in my ...
3
votes
2answers
2k views

Nagios frontend w/ API to change configuration?

My workplace used to use Monarch (bundled in Groundwork Community Edition). I built a custom CGI that would update the configuration when changes happen in our database of hosts (separate ...
3
votes
2answers
9k views

keepass web interface [closed]

I'm just getting started with Keepass http://keepass.info/ as a password database. It works great as an standalone application. The problem I'm having is when I am with out MY computer or USB key ...
3
votes
3answers
7k views

Apache2 reverse proxy seems to intermittently freeze?

Apache2 reverse proxy seems to intermittently freeze when proxying a tomcat web app. The problem is that every so often (once or twice a day usually after inactivity) when I try to log into this ...
3
votes
2answers
4k views

Http-Only cookies in WebLogic: what versions support them/how and why are they supported?

We want to make all cookies set by our webapp http-only. I only have a basic understanding of the benefits of doing this but I'm told by security people that it's a Good Thing (tm) Our app is running ...
3
votes
1answer
3k views

How to configure Glassfish + NGINX to serve static files with NGINX?

I have a EC2 ubuntu with Glassfish v3 + Nginx setup to host my java web application. This application is deployed as a WAR file to Glassfish . The NGINX is currenty passing all request to the ...
3
votes
1answer
632 views

Is there a open source web application for monitor the activity of sql server?

Is there a open source web application for monitor the activity of sql server? monitor users, queries, performance , ...
2
votes
11answers
833 views

Is there a preferred flavor of linux for hosting web applications?

I'm working for a startup and we are using a Virtual Private Server to host the web application and have been given a plethora of Linux flavors to choose from. Which flavors are better for which ...
2
votes
4answers
434 views

Is there an app/script I can deploy to enable my users to change their own LDAP passwords?

I've recently enabled LDAP based authentication on my domain. This has allowed us to use a single set of credentials to administer the blog, the forum and the wiki. Unfortunately, this has come at ...
2
votes
5answers
304 views

Server crashed - corporate web application is down - considering moving to an online host - any suggestions?

I'm in a mess here. For a couple of years we've been running our own custom made application on a local server in our office. The servers had its well bad days and good days now and then - however the ...
2
votes
6answers
2k views

What is a good web interface for remote linux load monitoring? [closed]

I'm looking for some type of remote linux monitoring software that you can view using a web interface. And I'm not just looking for the basic load information. I'm also looking for process ...
2
votes
3answers
6k views

Tips to backup ubuntu server

I have a Ubuntu server hosting a PHP5 / MySQL webapp. I also have another server (offsite) with a directory just for backups of my webapp server. Currently, I have a simple cron job which performs ...
2
votes
3answers
289 views

How to test web application performance from other continent?

We are hosting our web application http://timr.com on a server located in Germany. The server handles a high load of traffic very well and everything works as desired in terms of performance and load ...