We’re developing multitenant Angular Web App which uses Azure DocumentDb as a storage. Documents from all tenants of the app stored in the same collection and distinguished by tenantId attribute of the document. We will have middle tier .NET service…
I am using a CAS server to secure my Spring applications which includes REST and HttpInvoker APIs. When an application redirects to a CAS server in a different domain we get CORS 'issues'. I have added the eBay Cors-Filter https://github.com/eBay/cors-filter…
Users sign up in my platform from the mobile app (Android & iOS). Once they have completed a form, I do a RESTful call to my server with the username and password and an API key. https://api.example.com/v1/users/register I assume that…
I am developing an API that is consumed by a backbone web app (and also by iOS and Android apps) that right now is returning user-generated content with encoded HTML entities, so for example the API clients will get <div>…
These days robots.txt became an important tool for SEO in websites. Through this file, web developers says crawler robots to check and not to check specific paths. But on the other hand, there are many secret and important directories and…
I'm building Web site, and wondering how I can assure that it is secure if first request is made by HTTP. HSTS do this but partially. I think not opening HTTP port solve this problem. But is this standard? My…
I use this script to enable multilanguage on my website : <?php // Start a Session, You might start this somewhere else already. session_start(); // What languages we support $available_langs = array('en','ro'); if(isset($_GET['lang']) && $_GET['lang'] != ''){ // check if…
I'm managing a PLESK server and got this error from a client after they did a PCI scan on their site. What is ProFTP and is this really an issue? How would I go about fixing this issue?
In Plesk Panel you have always an Administrator account with the username "admin". I did not find any setting to change the username to something else than "admin". I don´t like the idea that someone can try to login with…
We've tried a few things that we found around Google for this, but can't seem to get anything to work. The Problem We have a server with around 500 Wordpress websites on it. We're trying to lock down all the…