425 reputation
213
bio website stacktogether.com
location Singapore, Singapore
age
visits member for 3 years, 3 months
seen Jan 16 at 10:57

Author, Programmer, Entrepreneur

I want to master the art of living through mastering the art of writing prose, developing software, and selling what I make.


Jan
16
comment 2 factor authentication - cost effective solution for a web startup
I read the docs. but not sure if it means that my users must have a google account?
May
10
awarded  Yearling
Feb
21
awarded  Popular Question
Jan
1
comment Restarting nginx with Jenkins or Phing - is it safe to allow Jenkins to run sudo without prompt for password
thank you , i will give this a shot!
Dec
29
comment Restarting nginx with Jenkins or Phing - is it safe to allow Jenkins to run sudo without prompt for password
thanks for your edit. I have one more follow up question. Based on your edit about having one production server and one that runs jenkins, if i also need to have a webapp.com which is my production and a stage.webapp.com which is a stage environment. Both production environment and stage environment would be accessing similar user generated content files and data. The stage environment will use a duplicate of the production database to prevent accidental overwrites. The UGC files would also be duplicated. In this setup, do I still use the same setup as you advised?
Dec
29
comment Restarting nginx with Jenkins or Phing - is it safe to allow Jenkins to run sudo without prompt for password
My second follow up question is so do you mean I have one server for jenkins, one for production server, and one for development server? In total 3?
Dec
29
comment Restarting nginx with Jenkins or Phing - is it safe to allow Jenkins to run sudo without prompt for password
Run it as a normal user so jenkins can restart it without root permissions. You mean as the same user group as the jenkins user?
Dec
28
asked Restarting nginx with Jenkins or Phing - is it safe to allow Jenkins to run sudo without prompt for password
Sep
29
awarded  Popular Question
Aug
14
awarded  Caucus
Jan
18
awarded  Yearling
Jul
7
awarded  Nice Question
May
10
awarded  Nice Question
Apr
12
comment How do I secure my SaaS startup?
Thank you for the answer, xntrik. I will definitely consider this when everything is properly running. Now busy with developing.
Mar
14
comment When should I not use CSRF protection for a form?
@AviD Judging on the options available to me, I probably would go ahead and just enforce the users to at least know FormHelper code for this protection. SEcurity is important, so i guess I cannot let them get away with normal HTML form
Mar
14
comment When should I not use CSRF protection for a form?
@AviD I am using a framework called cakephp where to use CSRF protection the UI requires the use of a FormHelper which is native to the framework. hence requiring my users/designers to be at least somewhat familiar with the framework as well.
Mar
13
accepted When should I not use CSRF protection for a form?
Mar
13
revised When should I not use CSRF protection for a form?
added 254 characters in body
Mar
13
comment When should I not use CSRF protection for a form?
i understand what you are driving at. thank you.
Mar
13
comment When should I not use CSRF protection for a form?
The form in question is in a template that i intend to let my users have free rein to customize the look and feel. My users are targeted at those who will be comfortable using Twig and Liquid to customize UI. Having CSRF protection means it will be less intuitive for the web designers. hence motivation behind the questions