Category: Webservers

Additional FTP Account In Plesk

Sometimes on a website you want to have a folder inside the document root that has it’s own FTP account. For example you might have a /news folder and you want your ad agency to be able to post articles to this folder but not access the rest of the website. Unfortunately plesk does not provide facilities for having multiple FTP accounts on a single site under the document root. Here’s a work around: 1. In Plesk, create a “Web User” in the desired domain. The web user will have a document root at: /var/www/vhosts/domain.com/web_users/[username] And the corresponding url will be: http://domain.com/~[username] Where username is the name that you assigned to the web user in Plesk. This is now your FTP account. Give the login to whoever needs it and let them upload content. 2. Next we’ll use a rewrite rule to map the web user’s document root into a

Read More »

Self-signed cert for Apache

Here are the steps to create a self signed certificate. Replace [domain_name] with the actual domain name of the virtual host. 1. create key

2. generate certificate signing request

3. generate the certificate

Read More »

Block access to .svn folders

Here are three ways in Apache to block access to the .svn folders. With access controls:

With rewrite rule:

With redirect:

These come from the excellent MDLog:/sysadmin blog at: http://www.ducea.com/2006/08/11/apache-tips-tricks-deny-access-to-some-folders/

Read More »

Hide PHP Version

To hide the PHP version from HTTP responses, edit /etc/php.ini and change:

to:

Then restart apache.

Read More »

Backported CVEs in httpd-2.2.3-22

For a recent PCI audit remediation project I had to assemble a list of recent CVEs that were resolved via backports in httpd-2.2.3-22 on RHEL5. Here’s the list: https://rhn.redhat.com/errata/RHSA-2008-0008.html CVE-2008-0005 CVE-2007-6422 CVE-2007-6421 CVE-2007-6388 CVE-2007-5000 CVE-2007-4465 https://rhn.redhat.com/errata/RHSA-2008-0967.html CVE-2008-2364 https://rhn.redhat.com/errata/RHSA-2007-0746.html CVE-2007-3847 https://rhn.redhat.com/errata/RHSA-2007-0556.html CVE-2006-5752 CVE-2007-3304 CVE-2007-1863 http://kbase.redhat.com/faq/docs/DOC-9182 CVE-2006-3747 https://rhn.redhat.com/errata/RHSA-2006-0159.html CVE-2005-3357 CVE-2005-3352

Read More »

Categories

Get a free consultation from Reliable Penguin

Submit the form—or for immediate service call 866-649-7984.