1
vote
1answer
41 views

I've ported my website locally installed to Internet. Is it secure?

Sorry about that ugly title, but I've managed to share my Wordpress installed locally (using WAMP server) to internet, just porting my 80 port to the public 1234 port in my router configuration. So, ...
1
vote
1answer
118 views

Hosting small site from home, local hostnames showing up in AWStats?

For the past day and a half I've been setting up my Raspberry Pi for hosting a small website. I'm using Apache2, PHP & MySQl and have installed AWStats so I can keep track of some things. ...
3
votes
1answer
127 views

Lighttpd: Serve all files in directory as static

How can I prevent any code execution under a specific directory path using Lighttpd configuration? I do not want to use a whitelist/blacklist, but simply serve any file as a static file under that ...
0
votes
1answer
201 views

Sandbox on a linux server for group members

I am a member of a large group (academic department) using a central GNU/Linux server. I would like to be able to install web apps like instiki, run version control repositories, and serve content ...
1
vote
1answer
29 views

Is it possible to change content of a file residing on other server using HTTP 1.1 features?

Let's say we have a file on server which have all permissions 777. Is it possible to make a script, situated on other server than the file to modify. The script uses HTTP 1.1 protocol features only to ...
2
votes
0answers
28 views

How does an Update Server verify that the request sent was the intended application?

If you have an update service that's running on a server listening for connections on some random port, how could one verify that any requests coming into that port are from the specific application ...
0
votes
1answer
329 views

Does a webserver need to have outgoing port 80 blocked for security reasons?

At work, we've got Windows Server 2008 running. I've set up XAMPP, and a few websites - everything works perfectly. However, outgoing port 80 is blocked in the firewall for 'security' reasons. I was ...
0
votes
1answer
566 views

apache2 or apache2-mpm-prefork, which one is more secure?

From a pure security perspective, and on a Debian (or derivative, such as Ubuntu) system, what should one be installing as a web server? apache2 sudo apt-get install apache2 OR ...
0
votes
4answers
523 views

How to restrict access to a server application

I have written a simple server application (with an HTTP interface). I want to ensure that only calls from the local machine are processed - i.e. I want to prevent outsiders from accessing/using my ...
0
votes
1answer
95 views

What security issues will I face when hosting a web app from home and how should I deal with them? [closed]

I'm considering hosting a publicly available web application from my home with the latest ubuntu server, the ruby on rails framework, some kind of SSL, and mongrel. What security issues will I face ...
1
vote
1answer
216 views

Mac webserver, MySQL security

I know its not really practical, but anyway recently I got interested in making my mac a server, possibly to host a blog, with WordPress. Right now I have a free DynDns account and host with gets the ...