Three steps to prevent hackers from invading Web servers

Web servers often happen, here are three solutions to the most common scenarios

Anti-Access database downloads

Adding an MDB extension map is OK. Methods: IIS Properties, home directories, configurations, mappings, application extensions added. mdb application analysis, as for the selected parsing file can be tested, as long as the access to the database can not find the page on it, here gives a choice for Wam.dll

Anti-upload

Take the MSSQL database for example. In the IIS Web directory, only IIS users can read and list directory permissions in the Permissions option, and then go to the upload file to save and store the database directory, add permissions to the IIS user, and then in these two directory properties, execute the Permissions option to complete the pure script instead. In general, the directories that can be uploaded do not give executive permission, and directories that have execute permissions are not allowed to upload.

Anti-MSSQL Injection

This is important in a reminder that the connection database must never use the SA account. Generally, you can use Db--owner permissions to connect to a database. However, there is a differential backup to get the Webshell problem. Let's talk about how to prevent differential backups.

A differential backup has the right to backup, and you need to know the web directory. Now the way to find the Web directory is through the registry or listing the host directory from the search, these two methods actually use the Xp_regread and xp_dritree these two extended storage, we just delete them. But there is a point in case the program itself has been out of the catalog. Therefore, to make the account less privileged, unable to complete the backup. The operation is as follows: In this account, the database access option only needs to select the corresponding database and give its db_owner permissions, for other databases do not operate, and then to the database, attributes, permissions, the user's backup and backup log permissions can be removed, This way, intruders cannot get websehll through differential backups.

Above gives three kinds of methods, may also some people will say has the injection point to do, which is really the cliché, supplements. As to how to repair, if you do not know how to write filter statements, the use of the online off-the-shelf injection system is good. please contact the site, timely note your name. Contact Email: edu#chinaz.com (change # to @).