By default, MongoDB has no protection at all. Anyone can log in remotely without any account, which is really dangerous if you use it for programming. So in this post, I’ll show you how to add account settings to MongoDB, so that logging in requires a username and password, and I’ll also show you how to restrict logins by IP address. ...
For the past few days I’ve been writing a small program to organize contacts, so I’ve been researching quite a few things. While working on the database side, I wanted to guard against so-called SQL injection, where a malicious string is placed in a parameter to attack the database. So I applied some basic defenses. The following is how to add some basic protection against SQL injection~ ...
As the saying goes, the tall tree catches the wind. WordPress is the most widely used blogging platform in the world, so it's also a prime target for hackers everywhere. Strengthening your WordPress security is something every blogger has to do. WordPress releases security updates every so often, but keeping your site safe also depends on you. A Japanese organization once studied computer incidents (computers being attacked) and found that a large share of them came from user mistakes rather than from problems with the system itself. So in this post, I'll borrow an article from the Chinese blog Moonlight Blog to show you how to check whether your WordPress installation is secure enough. ...
WP Security Scan is a WordPress plugin that scans your site and reports WordPress vulnerabilities. If you host your own site, you probably already know that before setting things up you need to configure file permissions — things like 777 and 655. What WP Security Scan actually does is check whether your file permissions are set correctly, and it can also check and change your database prefix. It's a great fit for beginners....