CloudInsidr

Cyber security, infotech

  • Subscribe!
  • Privacy Policy
  • Legal
  • Contact Us

Join us on Twitter: @CloudInsidr

  • news & alerts
    • events
    • industry analysis
    • industry gossip
    • people
  • cloud, edge & co.
    • AWS
    • administration & orchestration
      • web servers in the cloud
      • mail servers
      • databases
  • cybersec & warfare
    • encryption
  • blockchain
Home Archives for Uncategorized
Create a Content Security Policy to Protect Your Web Application against XSRF/CSRF/XFS, Clickjacking and Other Code Injection Attacks

Filipe Martins 2016-02-22 Leave a Comment

Create a Content Security Policy to Protect Your Web Application against XSRF/CSRF/XFS, Clickjacking and Other Code Injection Attacks

[Updated 2019-03-17] Are you wondering why some JavaScript code from external domains simply won’t execute on your website? The reason could be as simple as an overly restrictive Content Security Policy (CSP for short). This article explains how you can create a Content Security Policy that’s both protective and functional. It will help you to secure your web server from some types of cross-site request forgery (XSRF/CSRF/XFS), clickjacking and other code injection attacks.

[Read more…]

Filed Under: administration and orchestration, cloud, edge and everything in between, cybersecurity and cyber warfare, encryption, Uncategorized, web servers in the cloud Tagged With: CSP, cyber defense, cyber security, cybersecurity, NGINX

How to Set up ip2nation: Geotargeting Made Easy for the Amazon Link Affiliate Plug-in and Your Server-Side Scripts

Anna E Kobylinska 2016-02-05 Leave a Comment

How to Set up ip2nation: Geotargeting Made Easy for the Amazon Link Affiliate Plug-in and Your Server-Side Scripts

The Amazon Link plug-in for WordPress implements geotargeting based on ip2nation, a free geotargeting library from Per Gustafsson Consulting (available here). If you are wondering what you need to do in order to integrate the Amazon Link affiliate plug-in for WordPress (seing how a separate installation plugin for WordPress is two years old as of this writing, and counting), here is a quick howto for those who can access their websites’ MySQL or MariaDB database servers.

[Read more…]

Filed Under: Uncategorized, web servers in the cloud Tagged With: Affiliate, Amazon, dumpfile, geotargeting, MariaDB, MySQL, SQL, WordPress

RegEx Bliss: Set Up URL Redirects in NGINX Using Regular Expressions without Rewrites

Anna E Kobylinska 2016-02-04 Leave a Comment

RegEx Bliss: Set Up URL Redirects in NGINX Using Regular Expressions without Rewrites

There are two major no-nos when it comes to writing NGINX redirects:

  • thou shalt not use if statements (that’s a major no-no);
  • thought shalt not use rewrites (they are a waste of resources, as in “slow” and “expensive”).

Instead, use ol’ good location blocks. But what if you have plenty of URIs to redirect? How do you deploy RegEx magic with NGINX? Easy.

[Read more…]

Filed Under: Uncategorized, web servers in the cloud Tagged With: NGINX, RegEx, regular expressions

Tip of The Day: Test Your Web Server’s Crypto Prowess for TLS, Diffie-Hellman, and more

Anna E Kobylinska 2015-12-01 Leave a Comment

Tip of The Day: Test Your Web Server’s Crypto Prowess for TLS, Diffie-Hellman, and more

Are you concerned about the security of data transmissions in which your web server participates day in and day out? Passwords, user names, credit card numbers, and other sensitive private communications on the Internet can easily be compromised unless you actively take precautionary measures and preempt the most common exploits by means of modern cryptography. Your users trust that you will protect them. The only question is: how do you measure success?

[Read more…]

Filed Under: cloud, edge and everything in between, cybersecurity and cyber warfare, Uncategorized, web servers in the cloud Tagged With: cipher suite, cryptography, SSL, TLS, web server

How to Fix PHP Session Errors while Respecting Security with Correct Permissions

Cloud Insidr 2015-11-25 Leave a Comment

How to Fix PHP Session Errors while Respecting Security with Correct Permissions

Have you ever seen one of these weird redirects? WordPress, for example, may refuse to show the log-in page, leaving you out of its admin interface for good. Here is what to do about it.

[Read more…]

Filed Under: Uncategorized, web servers in the cloud Tagged With: error, Linux, log, NGINX, permissions, PHP, php-fpm, session, session hijacking

  • « Previous Page
  • 1
  • …
  • 3
  • 4
  • 5
  • 6
  • Next Page »

Subscribe

SSL/TLS Certificate Square (250 x 250)

Pearson Education (InformIT)

SSL/TLS Certificate Medium Rectangle (300 x 250)

©2022 CybrAnalytiqa OÜ

  • Content purchasing and syndication