meta user
network profile
| bio | website | |
|---|---|---|
| location | Singapore, Singapore | |
| age | ||
| visits | member for | 2 years, 4 months |
| seen | Jan 7 at 1:48 | |
| stats | profile views | 30 |
Author, Programmer, Entrepreneur
I want to master the art of living through mastering the art of writing prose, developing software, and selling what I make.
|
May 10 |
awarded | Yearling |
|
Feb 21 |
awarded | Popular Question |
|
Jan 1 |
comment |
Restarting nginx with Jenkins or Phing - is it safe to allow Jenkins to run sudo without prompt for password thank you , i will give this a shot! |
|
Dec 29 |
comment |
Restarting nginx with Jenkins or Phing - is it safe to allow Jenkins to run sudo without prompt for password thanks for your edit. I have one more follow up question. Based on your edit about having one production server and one that runs jenkins, if i also need to have a webapp.com which is my production and a stage.webapp.com which is a stage environment. Both production environment and stage environment would be accessing similar user generated content files and data. The stage environment will use a duplicate of the production database to prevent accidental overwrites. The UGC files would also be duplicated. In this setup, do I still use the same setup as you advised? |
|
Dec 29 |
comment |
Restarting nginx with Jenkins or Phing - is it safe to allow Jenkins to run sudo without prompt for password My second follow up question is so do you mean I have one server for jenkins, one for production server, and one for development server? In total 3? |
|
Dec 29 |
comment |
Restarting nginx with Jenkins or Phing - is it safe to allow Jenkins to run sudo without prompt for password Run it as a normal user so jenkins can restart it without root permissions. You mean as the same user group as the jenkins user? |
|
Dec 28 |
asked | Restarting nginx with Jenkins or Phing - is it safe to allow Jenkins to run sudo without prompt for password |
|
Sep 29 |
awarded | Popular Question |
|
Aug 14 |
awarded | Caucus |
|
Jan 18 |
awarded | Yearling |
|
Jul 7 |
awarded | Nice Question |
|
May 10 |
awarded | Nice Question |
|
Apr 12 |
comment |
How do I secure my SaaS startup? Thank you for the answer, xntrik. I will definitely consider this when everything is properly running. Now busy with developing. |
|
Mar 14 |
comment |
When should I not use CSRF protection for a form? @AviD Judging on the options available to me, I probably would go ahead and just enforce the users to at least know FormHelper code for this protection. SEcurity is important, so i guess I cannot let them get away with normal HTML form |
|
Mar 14 |
comment |
When should I not use CSRF protection for a form? @AviD I am using a framework called cakephp where to use CSRF protection the UI requires the use of a FormHelper which is native to the framework. hence requiring my users/designers to be at least somewhat familiar with the framework as well. |
|
Mar 13 |
accepted | When should I not use CSRF protection for a form? |
|
Mar 13 |
revised |
When should I not use CSRF protection for a form? added 254 characters in body |
|
Mar 13 |
comment |
When should I not use CSRF protection for a form? i understand what you are driving at. thank you. |
|
Mar 13 |
comment |
When should I not use CSRF protection for a form? The form in question is in a template that i intend to let my users have free rein to customize the look and feel. My users are targeted at those who will be comfortable using Twig and Liquid to customize UI. Having CSRF protection means it will be less intuitive for the web designers. hence motivation behind the questions |
|
Mar 13 |
comment |
When should I not use CSRF protection for a form? @AviD what about an action that any anonymous visitors can perform? for eg, add item to cart without logging in. can i forego CSRF protection in this case? |
