Displaying posts tagged: httpd

Protecting /server-status and /server-info, sort of.

2009-04-14 10:08 No Comments
Just turned on server-status or server-info? I have previously not made much use of Apache's server-status and server-info functions, but recently I've found a use for them as traffic and development increases on my new server. After a bit of reading online, I noticed that The Apache Software Foundation doesn't even protect their own server-status page. ...

Protecting your phpinfo(), sort of.

2009-04-03 22:23 No Comments
The truly security-conscious developer should write their application with security in mind from the beginning. It will relieve headaches and help to plug potential security holes down the road. To that end, when replacing Slackware with Ubuntu Server on my 64-bit server, I needed some information about the configuration of PHP 5 on Ubuntu, because it ...