All Questions
6
questions
1
vote
0
answers
23
views
Secure access to pre authorized individuals only on application server
I am building a PHP application and would like to lock the backend (even login page) to only be accessible to preauthorized people - even further be able to link activities to the authorized ...
- 177
1
vote
1
answer
44
views
Webserver | IIS | Configuring to not run certain files
I currently have a webserver running Windows Server 2012 which is running IIS as its webserver and using PHP.
Lets assume the a user is able to upload a trojan onto my server, either through a ...
- 11
1
vote
1
answer
297
views
Keeping PHP up-to-date on a Windows IIS server
On my Windows servers, Microsoft Update keeps IIS and ASP.NET updated automatically.
On my Linux/Debian servers, cron-apt keeps Apache/PHP/etc. updated (semi-)automatically.
However, I have not found ...
- 2,217
1
vote
1
answer
153
views
Securtiy concerns about IIS websites' access rights - Restrict them not to be able to read c:\, etc
I have some security concerns about my IIS websites.
From PHP-files (FastCGI) on our server the scripts are able to read my system's root directory (c:\), but even list the content of c:\windows. What ...
- 199
1
vote
1
answer
317
views
IIS and PHP restrict IO permissions
I have php installed trough a fastCGI module.
Is there a way to restrict the module (php.exe) read / write permissions to only the directory (+ subdirs) of the IIS site that is calling it?
I need ...
- 201
1
vote
1
answer
197
views
Locking down a server for shared internet hosting
Basically I control several servers and I only host either static websites or scripts which I have designed, so I trust them up to a point.
However, I have a few customers who want to start using ...
- 3,546