Tag Info

Hot answers tagged

40

Here's a breakdown of the major players in the external performance monitoring space: Top Shelf Webmetrics.com - largest network, great monitoring technology, fun UI Keynote.com - focused on mobile, long time player in the space Gomez.com - lots of different products, product life cycle focus Middle AlertSite.com - does a lot of ...


33

According to the FHS, /usr is for shareable, read-only data - not where you want to put the website. This is where you should put your code (for example Fedora does this for Wordpress). See also the web assets packaging guide for Fedora. /var is "variable data files. This includes spool directories and files, administrative and logging data, and transient ...


27

I love OpenID, and it's absolutely better than the "traditional" per-site credentials metaphor. I don't want more credentials to manage, and I don't want to trust J. Random site to store credentials I provide securely. I think that users will become more comfortable with it as it becomes more commonplace. Hopefully it becomes more commonplace.


21

There is a great add-on for Firefox called LocationbarĀ² that does just what you want (and some!). One of its main features is to break the URL into breadcrumbs. In the options dialog you can specify what protocols you'd like to hide: Here is what mine looks like:


20

Just create this script /usr/bin/nginx_modsite and make it executable. #!/bin/bash ## # File: # nginx_modsite # Description: # Provides a basic script to automate enabling and disabling websites found # in the default configuration directories: # /etc/nginx/sites-available and /etc/nginx/sites-enabled # For easy access to this script, ...


19

Take a look at the Filesystem Hierarchy Standard (Wikipedia). I myself use /srv/www/$domain/{htdocs,logs,cgi-bin,...}.


18

If you have installed the nginx package from the Ubuntu repositories, you will have two directories. /etc/nginx/sites-enabled and /etc/nginx/sites-available. In the main nginx configuration, /etc/nginx/nginx.conf, you have the following line: include /etc/nginx/sites-enabled/*.conf; So basically to list all available virtualhosts, you can run the ...


17

The A-record alias you create has to be the same as the name of the bucket, because virtual hosting of buckets in S3 requires that the Host: header sent by the browser match the bucket name. There's not really another practical way in which virtual hosting of buckets could be accomplished... the bucket has to be identified by some mechanism, and that ...


16

The HTTP:// string is not a prefix of the URL, it's part of the URL. Which is why you can't (and shouldn't) hide it, since the application is displaying the URL.


16

Please point out if we are wrong. Negative Views We think for general users it might NOT be the preferable way. Users who have less tech knowledge would think twice or get confused. They are NOT used to it. They have to avail an open id from a certain provider which might be annoying to them. They might hate it because they will be redirected to another ...


15

I guess you're coming at this from the wrong angle. Many sites (including this one) slowly let you see more of the abilities as you prove you can be trusted. I'd suggest making first posts have to be moderated, or some form of voting system and then none of his posts will stay visible for long. This is a human problem really, not so much a technical one. ...


15

I currently support 220 servers up to 96 TB (totalling 2 PB or so), some in clusters of up to 240 TB, that my team built. Here are my advices : use a good, reliable hardware RAID controller : possible choices are 3Ware 96xx or 97xx, LSI 92xx, Areca 16xx, Adaptec 5xx5... Of course, with a Battery Backup Unit because power failures occur sometimes. use only ...


14

It depends on whether you want to delegate hosting the subdomain off to a different DNS server (or to the same server, but in a different zone file). You delegate a zone when you want some other entity to control it, such as a different IT department or organization. If you do, then you need NS records. If not, A or CNAME records will suffice. Let's say ...


14

Are you referring to nginx_ensite and nginx_dissite?


13

Why don't you just create a small icon that suits your web site and use that? It's trivial to do. Most modern browsers look for this file. I haven't tried it myself, but Googling, I found the website favicon.ico Generator that presents a simple image editor interface. You don't, of course, need to do this. It just gives a web site a little bit more ...


13

You could set Windows Scedule task that opens a the link to the website. And push the task trough your windows server with a GPO for each of your computer on the network.


12

If you accept credit cards, yes, absolutely, and not only purchase a certificate but be sure you are installing it correctly and writing good, secure code. If you are just getting started, much better to use a payment gateway (paypal, Authorize.net, etc) which offers a service where they do the actual payment transaction on their server.


12

Get the EICAR test vector and use that.


12

I just hit F12 in Google Chrome and loaded up your sites. This is what I learned: Your dedicated server is much faster than your VPS. It returned all of its resources almost twice as fast as the VPS. The problem with your slow speed doesn't lie there. The problem is this: You are loading some of your resources from www.elitereviewing.com, which loads ...


11

Short answer: What Chris S said: See "Our security auditor is an idiot, how do I give him the information he wants?". Long answer: Some of what a "SEO Guy" needs to do might require server access -- for example, installing optimized mod_rewrite rules, adding custom 404 pages, creating friendly redirects (and/or optimizing existing 3xx redirects), etc. ...


11

The first thing I would do is to take it off the net at least till I understand what exactly is the damage. Assessing what has been compromised in a timely manner is most crucial.


11

Cache as much as you can. Any pages that are dynamically created should be cached so that users will get a static version. In page components that query the db should also be cached. Try using an external service like Amazon S3 to serve images and multimedia (or have it ready to use if the site suddenly gets hit with a ton of traffic). Going live ...


11

Dreamhost offers unlimited diskspace and bandwidth. However, if your website is a static site, you could try hosting off Amazon S3. At $0.15/GB/month for storage, it's pretty cheap. The other pricing component is the bandwidth cost at $0.17/GB.


11

I have a Linux machine that has a cron job that runs linkchecker to send me a report. http://wummel.github.io/linkchecker/ If you are running Ubuntu it is in the package manager. sudo aptitude install linkchecker man linkchecker Lots of options. Works well for me. Can save the report in various formats.


10

Don't forget that it doesn't have to be an either/or option. You can (and probably should) add OpenID support in addition to traditional login methods. This won't scare away 'general' users - they just use the existing method, while making life much more pleasant for those who use OpenID.


10

It depends on how DNS is setup. If they do not have an A (or host) record at math.cmu.edu pointed at the IP of the web server, then the site will be inaccessible without adding the "www" in front. There is no standard that says a site needs to be accessible without the "www", but it has been a common practice for a long time since the web is so prevalent.


10

Thanks to Tor and innumerable other proxy services, you can't depend on an IP ban to block a user. You'd need to implement some kind of other barrier - email validation requirements on sign-up, maybe, or require moderation approval for new account creations? Unless your user sign-up process requires blood samples, social security numbers, and mothers' ...


10

From Key West to the topmost Northwest Passages Islands is about 4,000 miles which is a theoretical minimum of 20 milliseconds. Your theoretical minimum roundtrip time is 40 ms. I think you can safely remove the boundaries of physics from the equation. If you're in Toronto, then most of your customers will be much closer to you. What you need to accomplish ...


9

Have a look at the GeoIP databases. But i think to block ALL non UK visitors is not the best way. Imagine one of your users is in holidays autside the UK and want to reach your site. Have a look at the DROP list from Spamhaus. It contains all Spammer owned networks. I use the list within my firewall rules, and reduced the SPAM about 98% on the hosted ...


9

Honestly? Hire someone to manage your server. If you have a 1.3 TB database, cPanel is not for you. Given the amount of data, you're going to need a pretty optimized MySQL server in order to get anywhere near acceptable performance. cPanel is not exactly ideal for very large websites (it severely limits the amount of serverside settings you can change ...



Only top voted, non community-wiki answers of a minimum length are eligible