The tag has no wiki summary.

learn more… | top users | synonyms (1)

0
votes
2answers
511 views

Allow php and python script with apache but still have a secure server

problem "solved"? after backtracking where the permission first stops, the permission denial suddenly went away for no reason. I am building a webpage where the user must have the possibility to send ...
2
votes
1answer
122 views

What options exist to prevent Google Chrome Frame from rendering external URLs?

What options exist to prevent Google Chrome Frame (GCF) from rendering external URLs? I'd like to deploy GCF within our organization to allow some intranet sites to use modern html features. How can ...
0
votes
1answer
73 views

Protect public directories from download via wget and curl

My users upload their profile images and I save them in a public folder. The file names are not predictable (they are based on md5 hash of user id with salt). When someone views the user's profile, ...
0
votes
1answer
116 views

file permissions for scripts that need write access

This question helped me quite a bit: What's the best way of handling permissions for apache2's user www-data in /var/www? I would like to take the above question further, I want to be able ...
0
votes
1answer
96 views

Tomcat vulnerability patching

I had a tomcat vulnerability scan in my linux server and report came as Important: Authentication bypass and information disclosure (CVE-2011-3190) .My apache tomcat is of version 6.0.24. tomcat ...
0
votes
1answer
49 views

handing out client certificates

I'm building a webapp and for the first time I need to look in to security, because some actions should only be done by registered users. of course these parts of the app operate trough https ...
-1
votes
1answer
189 views

You don't have permission to access /on this server

I created a form in joomla with 2000 fields but when I submit the form it gives me: error-- You don't have permission to access /en/soccer-player-update on this server. Additionally, a 404 Not Found ...
1
vote
0answers
67 views

Understanding & Resolving Web Server Exploits

We recently had someone contact our company pointing out that we had numerous security threats that could be used to exploit our systems. They were nice enough to provide a list of these to which we ...
0
votes
0answers
81 views

Hardening of ubuntu server.How to prevent overkill checks? How to detect genuine request from attacks?

I have followed one these hardening check list tutorials where I have noticed that there fail2ban installed and denyhost at the same time. To my knowledge fail2ban does a little more than what ...
0
votes
0answers
131 views

How vulnerabilities in the Java affects application running in Tomcat/JBoss

I wonder what impact has Java vulnerabilities on application in Tomcat. For example Java 1.6u45 has many reported security bugs (Remote Security Vulnerability). You can easily exploit it on client ...
0
votes
0answers
109 views

Lighttpd reverse proxy authentication

I have configured lighttpd as a reverse proxy to an internal webserver (wthttpd) on the same device. However I need to authenticate users first using php. The content served will be non-static, ...
0
votes
0answers
190 views

ADFS Transform Claim Rule in Claims Provider Trust

I have an ADFS 2.0 server acting as a Federation gateway (SP-STS) between my claims aware web application and an external identity server (IP-STS). I have: A Claims Provider Trust (CPT) set up with ...