The tag has no usage guidance.

learn more… | top users | synonyms

20
votes
7answers
11k views

Why do 'hackers' setup bots repeatedly fill out web forms?

There is something I don't get, one of my web apps has a small form that allows you to enter you name and email address to "subscribe" to a user list for a site I maintain. The site is very low ...
20
votes
18answers
8k views

What are some good web based trouble ticket systems?

I'm looking for a trouble ticket system so that I can track issues for various customers. I used one before at my previous employer but it wasn't anything too great. I'm wondering which ones you would ...
19
votes
14answers
3k views

Should I force my users to change passwords every n days/weeks/month?

Question says it all. We are designing a system where security is very important. One of the ideas someone had was to force users to change passwords every 3 months. My take on this is that while its ...
19
votes
8answers
3k views

Software http load balancer?

Right now we only have one back-end server per site/web service. I'd be interested to hear people's experiences with various load balancer apps (something that runs on Linux). What would you ...
14
votes
7answers
8k views

How do I set up a web server out of my home? [closed]

I want to run a web server from home, so my family, and clients can see what I am doing. It would not run a large load, at most 2 or 3 users at a time. I would like to know how to do it with a ...
14
votes
6answers
2k views

Who is responsible for maintaining IIS for web apps?

IIS/Web Applications has been a tricky issue in the shops I've worked in over time. On one hand, IIS is a service built into the server (by in large) and is typically the responsibility of the server ...
12
votes
2answers
881 views

improve our deployment strategy

We have an ecommerce app that we develop at our company. Its a reasonably standard LAMP application that we have been developing on and off for about 3 years. We develop the application on a testing ...
10
votes
8answers
27k views

Is using integrated security (SSPI) for accessing SQL Server better for web applications?

When deploying web applications (.net) to a production environment, is it better to use integrated security or does it even matter? It seems to me that if a hacker breaks the web server, it won't ...
10
votes
10answers
2k views

How do you deploy your .NET Web Application? (Recommendations, please!)

We've recently upgraded our ASP.NET Website to a Web Application and we're shocked by the sudden leap in difficulty when deploying it. Considering how common a task this must be, I was wondering what ...
8
votes
3answers
747 views

Enterprise internal URL conventions

developer here... I'd like your IT perspective on this one... I'm building a new internal web app for my company, and starting to think about how it will be deployed. Many of the existing web apps ...
8
votes
1answer
5k views

Restart a single tomcat 7 webapp at a specific time?

Tomcat 7 is running on a Windows System. I need to restart one of the deplyoed web applications each day at a specific time. Is there an option to do that via script or (even better) does tomcat ...
8
votes
1answer
2k views

What causes a 400 Bad Request error for null (“”) and why would our nginx logs have so many?

Daily logs from Logwatch regularly report 400 Bad Request, null: 1744 Time(s) from our nginx logs. The log entries look like: 123.123.123.123 - - [25/Jan/2011:14:44:19 -0500] "-" 400 173 "-" "-" ...
8
votes
6answers
802 views

Web application to manage software distribution

I'm the IT guy for a small software development company. We have software that is downloadable by customers that purchased a license via our web site. I'm trying to find a solution to better manage ...
7
votes
3answers
14k views

What are perfect unix permissions for usual web project directories?

What are the perfect minimal permissions in octal format for the followings in a web application written? A directory where user uploaded static files (images/swf/js files) will reside A directory ...
7
votes
1answer
5k views

Nginx : strip header on HTTP, add header on HTTPS

I'm configuring an Nginx server so as to serve as a reverse proxy to serve a Django app (run on Gunicorn). My problem is that I want my site secured with HTTPS, and so I want my Django app to be able ...
7
votes
3answers
630 views

Web application deployment : one version for all clients or each his own

I have a general question about software deployment. At work, we design a CRM that is used through web browsers. I've recently been told that each specific client has its own server (although the ...
6
votes
2answers
341 views

Cloud infrastructure for home and personal experimentation? [closed]

As with many techies-- I've accumulated a number of older x86 servers, x86 desktops, and Cisco switches over the last few years. I'd like to build a small cloud cluster for web app experiments (web ...
6
votes
3answers
633 views

Hosted form of web-based file transfer tools [closed]

I'm looking for some software that will provide a service that resembles SendThisFile.com. My users generally turn to services like these when they are trying to send files that exceed the mail ...
5
votes
7answers
3k views

Web Application Vulnerability Scanner suggestions? [closed]

I'm looking for a new tool for the ol' admin toolkit and would value some suggestions. I would like to do some "automated" testing of handful of websites for XSS (cross site scripting) vulns, along ...
5
votes
2answers
963 views

Active Directory Web-based Front-End

I'm in search for a nice web front end to a medium sized active directory. The main use case is to automate tasks that can't be done with copy from templates (things like assigning proper UNIX ...
5
votes
10answers
12k views

IIS6: How to troubleshoot a 404 error in an ASP.NET application?

I have an ASP.NET application on a Windows Server 2003/IIS6 that refuses to run for some reason (it's the Xerox Centre, if that info helps). It has been working flawlessly before though on this server....
4
votes
5answers
556 views

Mitigating the 'firesheep' attack at the network layer?

What are the sysadmin's thoughts on mitigating the 'firesheep' attack for servers they manage? Firesheep is a new firefox extension that allows anyone who installs it to sidejack session it can ...
4
votes
3answers
232 views

Why shouldn't I serve my Java webapp directly with Tomcat?

I have heard several times that one should not serve a Java webapp directly to the outside world from the Tomcat server it is running on. Rather, one should have a regular web server in between -- e....
4
votes
1answer
839 views

how does a web application cope with thousands of requests?

I went to a few websites and noticed that they all use AJAX technology for many tasks such as chat, messages, and so forth. They use a lot of httprequests obviously. My question is if you build a ...
4
votes
5answers
8k views

Load balancing based on session cookie?

I have a web app that is going to run on multiple servers. I'd like to make sure, that requests using the same session (HTTP cookie header with value JSESSIONID=x) always communicate with the same ...
4
votes
1answer
390 views

Where is the best location for an app made ​​in NodeJS on a server?

For some time I am developing an application in Nodejs. And I asked where in the Linux file system on a server was the best place to leave it running. Since PHP5 and Apache2 is in /var/www , and ...
4
votes
3answers
15k views

Equivalent of phpMyAdmin for MSSQL?

Is there any webinterface for administrating MSSQL similar to phpMyAdmin (for MySQL)? I want a self-service setup where developers can create a database through webinterface and upload/download ...
4
votes
3answers
695 views

Naming convention for databases and database users for access by a web application?

When installing a web application where a single user is used to talk to a single database (say MySQL, but this could apply to other RDBMSes also), you often have a sequence of events such as this: ...
4
votes
3answers
287 views

Best practices to update a live web service

I am always curious about how large-scale live web application updates are done. Since the application is live, that is why it complicates everything -you should not down your service and at the same ...
4
votes
5answers
3k views

Intranet music web application for an office media server?

My office is thinking of setting up a media server with speakers connected to it so that everyone in our office can queue up music via a web app. Right now we just pass around a speaker cable. I'd ...
4
votes
2answers
4k views

What are the best strategies for scaling up my web application to be able to cope with a large volume of users?

I want to get some advice / best practices for how to go about developing a strategy for scaling up my a web application. I waffle on a bit here and show my limited knowledge but want to fill in my ...
4
votes
3answers
279 views

How would I recognize the “spoon-feeding problem” on a dynamic webapp server?

The "spoon-feeding problem", as it was recently explained to me, happens when connections to your application server are tied up feeding data across slow network connections to your clients. This ...
4
votes
2answers
11k views

keepass web interface [closed]

I'm just getting started with Keepass http://keepass.info/ as a password database. It works great as an standalone application. The problem I'm having is when I am with out MY computer or USB key ...
4
votes
3answers
9k views

Apache2 reverse proxy seems to intermittently freeze?

Apache2 reverse proxy seems to intermittently freeze when proxying a tomcat web app. The problem is that every so often (once or twice a day usually after inactivity) when I try to log into this ...
4
votes
3answers
483 views

Webapp for secure file delivery to customers?

Situation: For each customer, I have a script that generates some customized configuration files for their installation (host addresses, options, organization names, etc.) I need to get these to the ...
4
votes
4answers
232 views

App Pool limitations

We currently have about 600 .net sites in a single app pool. We're starting to get out of memory exceptions and have to recycle the app pool to fix the problem. I know it's generally a good idea to ...
3
votes
6answers
889 views

Sending emails from a VPS such as EC2

I'm working on deploying a rails site that will be sending emails (checkout confirmations, alerts, etc) from an EC2 server. What are some best practices for doing this successfully? There are two ...
3
votes
3answers
2k views

What are the best browser based administration tools for Linux?

Looking for recommendations the best comprehensive browser based administration tool for administering a Linux machine. Ideally this would be distribution agnostic. This could also be an "appliance" ...
3
votes
3answers
155 views

How to prevent discovery of a secure URL?

If I have a url that is used for getting messages and I create it like so: http://www.mydomain.com/somelonghash123456etcetc and this URL allows for other services to POST messages to. Is it possible ...
3
votes
6answers
5k views

Any Recommendations for a Web Based Large File Transfer System? [closed]

I'm looking for a server software product that: Allows my users to share large files with: The general public securely to 1 or more people (notification via email, optionally with a token that ...
3
votes
2answers
3k views

How do I configure IIS 7 (discount asp.net) to point subdomains at application subdirectories?

I have an discount asp.net account, which uses IIS 7 and I want to configure subdomains to point at specific applications on the site. For instance: 's1.site.com' would run the application at 'site....
3
votes
3answers
4k views

SSL 2048-bit certs, how to upgrade our web app without breaking legacy API customers?

The Problem SSL certificate providers are moving from certificates signed with 1024–bit RSA keys to the new 2048-bit RSA key standard. One article explaining the background and significance of the ...
3
votes
6answers
672 views

Cheap, minimal, robust web application hosting for at least three nines (99.9%) uptime?

How can one achieve the cheapest yet very reliable web application configuration? Let's assume at least 2 application servers for $80/mo plus a DB server will support most people's applications for a ...
3
votes
3answers
2k views

Rename a web application in Sharepoint 2010

If I open Sharepoint Foundation 2010 Central Administration web and select Application Management and click on Manage Applications I can see all my Sharepoint 2010 applications. But How can I rename ...
3
votes
3answers
291 views

Is there any overhead in setting up multiple web sites in IIS?

One of our server administrators set up 1 web site per web application. This is mainly to have different host headers per application. (We also create DNS entries per application, allowing the web ...
3
votes
1answer
4k views

How to configure Glassfish + NGINX to serve static files with NGINX?

I have a EC2 ubuntu with Glassfish v3 + Nginx setup to host my java web application. This application is deployed as a WAR file to Glassfish . The NGINX is currenty passing all request to the ...
3
votes
4answers
298 views

Use single IP address for farm of servers

I am building an app where I have XX number of customers who can run on a single instance. The application scales out by adding more nodes (thus supporting XX more customers). I want a way to use a ...
3
votes
2answers
2k views

Nagios frontend w/ API to change configuration?

My workplace used to use Monarch (bundled in Groundwork Community Edition). I built a custom CGI that would update the configuration when changes happen in our database of hosts (separate application)....
3
votes
2answers
5k views

Http-Only cookies in WebLogic: what versions support them/how and why are they supported?

We want to make all cookies set by our webapp http-only. I only have a basic understanding of the benefits of doing this but I'm told by security people that it's a Good Thing (tm) Our app is running ...
3
votes
1answer
693 views

Is there a open source web application for monitor the activity of sql server?

Is there a open source web application for monitor the activity of sql server? monitor users, queries, performance , ...