Cloud Security

  In "What measures are used to protect dangerous applications (1)", we will explain why application security problems should be solved and how to get started. This article describes how to deploy applications for enterprises. Determine the priority

  How SSL works: the SSL handshake process for two-way certificate authentication. The following describes how the SSL protocol works. The client needs to send and receive several handshakes: 1. Send a "ClientHello" message, indicating that it

The following is a piece of NGINX configuration code, which has a simple comment.Everyone should remember the principle that the directory that can execute php programs must not allow read and write permissions, but the directory that can read and

Principle Analysis:1. triggers are supported after Mysql5, And the TRG and TRN files (in Linux) are automatically generated in the/var/lib/mysql directory after the trigger is created ).For example, create the following trigger:Generate the t. TRG

The redhat series linux users must have used yum to upgrade the system kernel and install software. It is impossible for each system administrator to manually install each package and handle complicated package dependencies, therefore, once a

By default, lnmp resolves the php5 suffix. If your program does not use the php5 suffix, it is best to remove it. Locate the following configuration section location ~ . * \. (Php | php5 )? $ {Try_files $ uri = 404; fastcgi_pass

I. Business Requirements Apache needs to implement encrypted authentication access based on user identity authentication to ensure the security of specific site pages. Here is the implementation process of the requirement. See the following

It's boring to get bored... turn a post and think it's fun.-_-English is not very good. translation is not very good. Don't blame me... you can understand it. The source is

This article uses CentOS 5.4 as an example to describe that the 5.x version should be applicable. For other versions, the command paths are different and the idea is the same.You can use the script configured after the initial installation of Linux

I. Basic Security 1. Account Security: Set the Shell of a non-logged-on user to/sbin/nologin to lock the account that is not used for a long time, delete useless account lock account files passwd and shadow lock files and view the status [root @

Apache parses the file suffix ". "the backend is a suffix. From the back to the front, if the suffix is invalid, the first one will be resolved, for example, 1. php. x1.x2. x3. it will first parse x3. there is no parsing x2. there is no parsing x1.

Many Webmasters have linux Hosts, whether they are virtual machines or physical machines. Generally, we use ssh (SecureShell is based on the security protocol at the application layer and Transport Layer) for remote connection ).Its default port is 2

Today, I want to talk to cainiao about the protection and inspection work we should do after the server is killed from the perspective of intruders. Daniel is familiar with system reinforcement and security issues, I have never worked on security

After you forget the root password of iOS, you can use the/etc/master. passwd file to modify the root password. You can use the iFiles text editor to edit it./Etc/master. passwdFile, after modifying the second line of root:, the first part before: 0,

Some Huawei mobile phones are improperly configured with/data/drm permissions, so that malicious apps can escalate their permissions through a few steps.Drwxrwxr-x system sdcard_rw 2013-04-15 drm installs a malicious app (android is allowed.

 Today, I saw someone asking me how to compare the file format document and what structure is being parsed In the debugging analysis program? I have summarized several methods here. You are welcome to add them, but sometimes you still need to rely

What Should users do if hackers create a hidden account on their own computers? Although the account hiding technology is the most concealed backdoor, it is difficult for users to find the hidden account in the system. In fact, as long as you

    At the beginning, I started to learn about SQL injection infiltration. I hope you can give me more guidance when writing something wrong or bad. In a supply and demand information published on the site to test the page http://www.xxx.com/new/new.

Http://www.spking.com/ I wrote it very briefly, but I should be able to understand it! No such questions will be answered in the future! Please do not transfer your post. It is not a NB technology. It is almost a dead thing, for fear of shame! Step 1

Source: 80sec Vulnerability announcement: http://www.bkjia.com/Article/200806/27529.html Method of exploits: a typical SQL injection vulnerability, as described in the