Reputation
Top tag
Next privilege 125 Rep.
Vote down
Badges
1 7
Impact
~7k people reached

  • 0 posts edited
  • 0 helpful flags
  • 3 votes cast
Feb
20
awarded  Notable Question
Oct
16
awarded  Popular Question
Aug
14
awarded  Popular Question
Nov
21
comment nginx proxying websockets, must be missing something
thanks, but that doesn't seem to have helped any. Any more ideas? :)
Nov
8
asked nginx proxying websockets, must be missing something
Aug
16
awarded  Scholar
Aug
16
accepted Does Apache running as site owner user cause a security hole?
Jul
18
awarded  Tumbleweed
Jul
10
comment Does Apache running as site owner user cause a security hole?
might be an issue with my terminology, no harm done :)
Jul
10
revised Does Apache running as site owner user cause a security hole?
added 81 characters in body
Jul
10
revised Does Apache running as site owner user cause a security hole?
added clarification, fix format
Jul
10
comment Does Apache running as site owner user cause a security hole?
I disagree that running wordpress is my "particular use case" you make it sound like I am running some niche custom software, they claim over 27M downloads and counting, and anything with a plugin ecosystem, like joomla, phpbb etc will be in a similar situation. Maybe I wasn't clear in my original Q, locking the apache user to a subdir has almost certainly been done on the host, but this security hole - as I see it - doesn't protect the website from itself
Jul
9
comment Does Apache running as site owner user cause a security hole?
Any ideas why the standard default isn't "CodeMonkey" for SFTP and "CodeMonkey-www" for apache? how is giving apache full access not a security issue, surely it means we can't protect ourselves against 3rd party plugin mistakes?
Jul
9
asked Does Apache running as site owner user cause a security hole?
Jul
2
comment apache : disable mod_deflate - [error] an unknown filter
+1 for your effort, but I can't find any more references to deflate, daren't deactivate other modules on a live server can can't recreate on my dev box :(
Jul
2
awarded  Supporter
Jun
18
comment apache : disable mod_deflate - [error] an unknown filter
thanks for the responses, I have edited my question with more detail
Jun
18
awarded  Editor
Jun
18
revised apache : disable mod_deflate - [error] an unknown filter
adding more detail in response
Jun
14
awarded  Student