NGINX HSTS: Complete Strict-Transport-Security Guide
by Danila Vershinin, August 5, 2018
Learn how to configure NGINX HSTS (Strict-Transport-Security) correctly. This comprehensive guide covers the RFC 6797 specification, preload requirements, redirect patterns for www and non-www domains, common misconfigurations, and how to avoid SSL stripping attacks with verified configurations.
Read More...Modern approaches to secure websites in 2018
by Danila Vershinin, August 3, 2018
Some of the things you really want to take care about to secure your website.
Read More...Magento 2 Security Checklist
by Danila Vershinin, June 24, 2018
When you prepare to launch your Magento 2 website, security is one of the primary areas of concern. Whether you plan to accept credit card data directly on your website, or on a payment provider’s pages – you are required to achieve PCI compliance. Otherwise, you’ll find your business at risk of being banned from […]
Read More...How to Remove the Server Header in NGINX
by Danila Vershinin,
How to hide the Server HTTP header in NGINX and more: hide the fact of using NGINX altogether.
Read More...Html.Exploit.CVE_2017_11793-6336854-1 FOUND. What is it?
by Danila Vershinin, October 14, 2017
Find out how to deal with Html.Exploit.CVE_2017_11793-6336854-1 and if you are affected
Read More...Stop Google Analytics SPAM bots and reduce server load
by Danila Vershinin, September 17, 2017
Reduce server load easily by configuring nginx to discard unknown hostnames. Fight those Google Analytics spam bots!
Read More...NGINX SELinux: Fix Permission Denied, 502, and Port Errors
by Danila Vershinin, August 7, 2017
Fix every common NGINX SELinux error: 502 bad gateway from proxy_pass, 403 forbidden on static files, port binding failures, and more. Complete boolean reference table, file context guide, and 11 real-world scenarios with verified one-liner fixes for RHEL, Rocky Linux, and AlmaLinux.
Read More...Varnish as Web Application Firewall
by Danila Vershinin, May 16, 2017
Protect your web application using.. simple Varnish VCL coding.
Read More...Protect Magento 1.x admin in Nginx setup
by Danila Vershinin, March 19, 2017
Protect Magento 1.x administrator interface and Wordpress administrator interface to fight hackers trying to steal credit card data
Read More...Vulnerability in the Linux kernel’s TCP stack implementation
by Danila Vershinin, August 12, 2016
Announcement of discovered vulnerability in the Linux kernel’s TCP stack implementation
Read More...