Hướng dẫn cài đặt Mod_Security trên nginx

ModSecurity for Nginx has been available for a while and we can use it freely in our Nginx webserver. ModSecurity was originally deveoped for Apache webserver, but it’s not available to be integrated with Nginx server, even it is in Beta state it works perfectly in our test enviroment. So, let’s see how to install mod_security […]

Hướng dẫn vô hiệu hóa script php trong các folder uploads

There are some times when your application needs to write data into some files and in order to achieve that you need to give writing permissions to certain directories like tmp, cache, logs and many others. The issue is that global writing permissions is a big security problem, because it allow anyone to upload malicious […]

Hướng dẫn bảo vệ SSH với fail2ban Trên VPS CentOS 6

Servers do not exist in isolation, and those servers with only the most basic SSH configuration can be vulnerable to brute force attacks. fail2ban provides a way to automatically protect the server from malicious signs. The program works by scanning through log files and reacting to offending actions such as repeated failed login attempts. Step […]