EXAFORO.COM: 10 hypertext preprocessor security suggestions for admins

El contenido de este artículo o información está sujeto a una licencia Creative Commons BY (CC-BY), puedes divulgar públicamente este contenido pero deberás hacer mención del autor: Kernel e indicar la dirección web de esta página: https://www.exabyteinformatica.com/tienda/foro/10-hypertext-preprocessor-security-suggestions-for-admins-t1478.html

The content of this article or any related information is under the Creative Commons license BY, you can republish this content freely but you must mention the author of this article: Kernel and indicate the URL of this page: https://www.exabyteinformatica.com/tienda/foro/10-hypertext-preprocessor-security-suggestions-for-admins-t1478.html



Suitable 10 hypertext preprocessor security suggestions for Linux admins



Php is among the most used server scripting programming languages. The market share speaks volumes about its dominance. The indisputable fact that personal home page 7 is already out makes the programming language extra attractive to existing builders. In spite of the fact that the alterations have come out, many developers are skeptical about personal home pages’ future. One cause is personal home page safety.

Php safety is a primary difficulty for developers. Personal home page presents robust safety inside out, nevertheless it is in the palms of developers to put in force them correctly. Listed here, we are able to look at some php safety advice for Linux admins. The information will assist you comfortable your net software and confirm correct functioning in the end.
Earlier than we beginning, realizing the system we are working with is indispensable. For demonstration applications, we are using Fedora. Although, the suggestions should work first-class with the Ubuntu version or some other Linux distro. Assess your OS distro manual for more information.

Let's move through one of the vital key information of our setup. in your case, they should still be an identical or such as here:

• Default web server: Apache

• DocumentRoot: /var/www/html

• Hypertext Preprocessor configuration file: /and so forth/php.ini

• Extensions config directory: /etc/personal home page.d/

• Safety file: /etc/php.d/protection.ini

These tricks will assist you protect your internet website from several types of normal attacks, equivalent to SQL injection, XSS, sea-surf attacks, eval(), File uploads, and so forth. Determine the average assault listing right here.

1. Eliminate useless modules

Personal home page comes with built-in php modules. They are advantageous for many tasks, however no longer each task requires them. That you can view the attainable Hypertext Preprocessor modules by means of typing right here command:



Once you pay money for the record, you now can get rid of the needless modules. The decreased number of modules will help you to ramp up the performance and security of the internet software you are working on.

2. Avoid personal home page advice leakage

It is common for platforms to leak a must-have counsel. As an example, personal home page releases advice comparable to versions and the proven fact that it is put in on the server. Here’s done throughout the expose_php directive. To keep away from the leak, you deserve to set the directive to off in /and many others/personal home page.d/protection.ini.



If anybody needs to know the version and its state, an easy run of the Curl command over the web page address will produce this assistance.



The preceding command will return here information:

HTTP/1.1 200 ok X-Powered-by: personal home page/7.0.10 content-category: textual content/html; charset=UTF-8

3. Disable far off code execution

Far off code execution is one of the common protection flaws in Hypertext Preprocessor security. By way of default, far flung code execution is enabled in your equipment. The "allow_url_fopen" directive allows for functions akin to require, include, or URL-mindful fopen wrappers to get direct access to the php info. The remote access is accomplished by using HTTP or FTP protocol and can cause the system to be defenseless towards the code injection vulnerabilities.

To ensure that your system is secure from far off code execution, which you could set the directive "Off", as proven beneath:



4. Log Hypertext Preprocessor blunders

An extra fundamental means of tightening the safety of your internet functions is to not demonstrate errors to the company. This could make certain that the hacker by no means can compromise the safety of the net web page. The edit must be achieved within the /etc/personal home page.d/safety.ini file.



Now, you're doubtless questioning after this, "How can a developer debug devoid of the aid of error?" developers can use the log_errors directive for debugging applications. All they need to do is permit the log_errors directive to "On" within the safety.ini file.



5. Handle elements correctly

Controlling materials is critical for making your app secure. To ensure suitable execution and safety, you should set the restrict for personal home page script execution. Furthermore, you additionally may additionally want to set a restrict on the time spent on parsing request facts. With execution time below manage, different substances such because the memory usage by means of a script should still also be configured thus. All of these metrics will also be managed by using editing the security.ini file.



6. Disable unhealthy php capabilities

Php comes with valuable features for developmental functions, but it is additionally plagued with services that can be used by way of hackers to take advantage of the net app. Disabling the capabilities can enhance the average security and make sure that you just are not littered with dangerous personal home page services.

To do so, you first deserve to edit the Hypertext Preprocessor.ini file. Once there, locate the disable_functions directive and
set the bad services in it. That you would be able to do it via simply reproduction/pasting right here code.



That you can examine greater about disabling dangerous personal home page services here.

7. Upload data

If your app would not require uploading any information, disabling the functionality to upload data can result in superior safety. To disable file importing from clients, you deserve to edit the security.ini file in the /and so on/Hypertext Preprocessor.d/ directory and set the file_uploads directive to Off.



8. Hold things up thus far

Developers are working 24/7 to patch the technology that you're the usage of. Personal home page is not any distinct. With an open supply neighborhood surrounding it, patches and bug fixes are launched generally. The updates additionally offer protection fixes for first-day exploits and different security vulnerabilities. if you are critical in regards to the protection of your app, at all times preserve your personal home page answer up to now. Additionally, maintaining the other linked know-how to the newest patch will be sure optimum protection.

9. Handle file system access

By using default, Hypertext Preprocessor can access information through the use of features akin to fopen(). The open_basedir directive offers the access. For starters, always maintain the open_basedir directive set to the /var/www/html listing. Atmosphere it to any other directory can result in protection issues.



10. Manage the put up dimension

Our remaining Hypertext Preprocessor security tip is to handle the put up dimension feature. The HTTP publish function uses the customer's browser to send facts to the internet server. For instance, a consumer can add a certificate and ship it to the web browser for processing functions. Everything works excellent unless one day a hacker makes an attempt to send an incredible file measurement to clog the server materials. This can simply lead to crashes or slow responses from the server. To give protection to your server from this exploit, you deserve to set the post size. The publish dimension may also be set in the /and so on/Hypertext Preprocessor.d/safety.ini file.

post_max_size=1k

Conclusion

Security is among the greatest issues for internet developers and Linux administrators. With the preceding counsel, you are bound to harden the protection across the development atmosphere and the Hypertext Preprocessor web app. in case you think we ignored whatever thing critical, remember to remark beneath and let us know.

---

No te pierdas el tema anterior: Top 10 Linux distros for computing device / computer

Salta al siguiente tema: Instalar Python 3.6.0 en Raspbian (Raspberry PI)

Quizás también te interese: