Hardening on Lin's Blog

MongoDB Security Settings: Account Setup and Login IP Restrictions

Wed, 25 Jan 2012 15:12:55 +0000

By default, MongoDB has no protection at all. Anyone can log in remotely without any account, which is really dangerous if you use it for programming. So in this post, I’ll show you how to add account settings to MongoDB, so that logging in requires a username and password, and I’ll also show you how to restrict logins by IP address.

How to Defend Against Basic SQL Injection in PHP?

Tue, 02 Aug 2011 07:00:27 +0000

For the past few days I’ve been writing a small program to organize contacts, so I’ve been researching quite a few things. While working on the database side, I wanted to guard against so-called SQL injection, where a malicious string is placed in a parameter to attack the database. So I applied some basic defenses. The following is how to add some basic protection against SQL injection~

Top 10 WordPress Security Tips

Sat, 14 Nov 2009 22:51:54 +0000

As the saying goes, the tall tree catches the wind. WordPress is the most widely used blogging platform in the world, so it's also a prime target for hackers everywhere. Strengthening your WordPress security is something every blogger has to do. WordPress releases security updates every so often, but keeping your site safe also depends on you. A Japanese organization once studied computer incidents (computers being attacked) and found that a large share of them came from user mistakes rather than from problems with the system itself. So in this post, I'll borrow an article from the Chinese blog Moonlight Blog to show you how to check whether your WordPress installation is secure enough.

WP Security Scan - Scan Your WordPress for Vulnerabilities

Sat, 14 Nov 2009 16:39:56 +0000

WP Security Scan is a WordPress plugin that scans your site and reports WordPress vulnerabilities. If you host your own site, you probably already know that before setting things up you need to configure file permissions — things like 777 and 655. What WP Security Scan actually does is check whether your file permissions are set correctly, and it can also check and change your database prefix. It's a great fit for beginners.