Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange
Search type Search syntax
Tags [tag]
Exact "words here"
Author user:1234
user:me (yours)
Score score:3 (3+)
score:0 (none)
Answers answers:3 (3+)
answers:0 (none)
isaccepted:yes
hasaccepted:no
inquestion:1234
Views views:250
Sections title:apples
body:"apples oranges"
URL url:"*.example.com"
Favorites infavorites:mine
infavorites:1234
Status closed:yes
duplicate:no
migrated:no
wiki:no
Types is:question
is:answer
Exclude -[tag]
-apples
For more details on advanced search visit our help page
Results tagged with Search options user 31625

A system whose primary function is to deliver web pages on request to clients.

1
vote
Use a separate computer to manage the site Most data breaches do not involve the website being hacked. Instead, an internal workstation is hacked when the user visits a malicious web page; this is ca …
answered Dec 19 '16 by paj28
1
vote
May I ask why you want to do this? This sort of physical segregation is (if done correctly) a high level of security, and normally only used for ultra-critical systems - military, intelligence, etc. I …
answered Oct 30 '14 by paj28
1
vote
Your application code. Any server-side application code - be it PHP/Perl/Python (whatever the P in LAMP means to you) is your greatest risk. Whether you have written it yourself, or it's an open-sour …
answered Mar 20 '14 by paj28
4
votes
"More secure" is unconstructive Thinking something is "more secure" often leads to poor decision making. All sorts of things are more secure while being a bad idea. It's more useful to ask "Does this …
answered Feb 8 '16 by paj28
6
votes
Yes, they should be separate servers. However, they don't need to be separate physical servers; they can be three virtual servers on one physical server. There is some room for debate in the standar …
answered Feb 4 '14 by paj28
1
vote
Yes there is a significant security threat to the WordPress server. Any application attack - such as SQL injection or cross-site scripting - will simply pass through the reverse proxy, and have the f …
answered Feb 6 '14 by paj28
3
votes
Before designing a protocol, we need to make an important decision: do we trust the server? If we do, the design can be quite simple: HTTPS would be used for communication encryption, and disk encryp …
answered Jan 2 by paj28
3
votes
If we enable the debugger with this code: app = flask.Flask(__name__) app.debug = True That only enables the debugger with the built-in dev server. To use the Werkzeug debugger with another WSGI se …
answered Oct 25 '16 by paj28
7
votes
Almost all sites leave port 80 open and have it issue a redirect to https://... The reason for this is that is your site is https://mysite.com/ then most users will access the site by typing mysite.c …
answered Feb 17 '14 by paj28
6
votes
On Windows and Unix - no. There may be obscure operating systems that use different path separators. To handle encoding securely there is a simple rule: fully decode before doing sanitisation. If you …
answered Apr 26 '16 by paj28
15
votes
Just seen this, a bit late, but... No - a simple web server can be administerd by root and still be basically secure. It is true that there are some benefits to admining as non-root, but these are …
answered Feb 23 '14 by paj28