Jump to content

Web Security


Vikz

Recommended Posts

protecting yourself from things like mysql injection........ thats funky just make sure everything is up 2 date like your mysql or maria db's etc but my 2 cents for web security is

if you do not need ssh access aka remote access 2 the server disable it immediately, this is solid advice i have been brute forced more times than u can imagine simply because i had remote ssh access enabled. 
also if you are going too use ssh remember that Using public key authentication for SSH is far more secure than using usernames and passwords to authenticate.

finally if you do not need remote mysql database access than disable it by setting bind-address=127.0.0.1 in my.cnf configuration file

Edited by Elvag
Link to comment
Share on other sites

Don't use passwords ever. SSH keys only. 

 

Passwords for things like root accounts to forum softwares/mysql users/ etc, I reccomend going to a password generator and generating a fairly long password for EACH account and keeping them in a neat notepad document or something.

Link to comment
Share on other sites

  • 2 weeks later...

SSH keys instead of plain passwords, CF as a web proxy, don't ever trust user input if you're coding something on your own - always escape any characters, any suspiciously looking shit.

Link to comment
Share on other sites

  • 2 weeks later...

Use bitninja.io and kernelkare if you have your own server. bitninja also has WAF to use with webserver for increased security. Maybe also, consider using docker if you use several web apps. Can increase security through containerizing.

Link to comment
Share on other sites

Cloudflare doesn't do that much with my MySQL Injections, you just have to setup it up properly its like the same thing with php if you can code it really good you won't have any issues

Link to comment
Share on other sites

  • Tony locked this topic
Guest
This topic is now closed to further replies.
×
×
  • Create New...