VPSBasics
WordPress has changed the way it manages user passwords and by default WordPress now recommends strong passwords whenever you forget your password, create a new user or simply…
The standard Linux firewall is called iptables, whilst it is extremely powerful and offers the ability to customise the rules to improve the overall security of your server,…
When looking to secure your website or web applications, a good place to start is by exploring your existing HTTP Security Headers to ensure they are relevant but…
ConfigServer Firewall (CSF) is a Stateful Packet Inspection (SPI) firewall created by the ConfigServer Services team. CSF, offers login and intrusion detection and other security applications for Linux…
With ConfigServer Firewall (CSF) installed for our server, we can utilise Login Failure Daemon (LFD), to setup a server cluster. LFD tracks and records all attempts to brute…
With ConfigServer Security & Firewall (CSF) installed we can use it to monitor the IP addresses associated with our server, to ensure they have not been blacklisted. You…
Once you have installed DirectAdmin you will want to setup some firewall protection for your server. DirectAdmin as standard does not include a firewall but utilises Brute Force…
ModSecurity is an open source, cross platform web application firewall (WAF) engine developed by Trustwave’s SpiderLabs. It provides protection from a range of attacks against web applications and…
The core version of jQuery used on most WordPress websites is 1.12.4. This version of jQuery was released in 2016 and is now significantly outdated with know security…
You may have seen attempts to locate and access your phpMyAdmin login URL in your webserver or domain access logs. You can limit these types of attacks by simply…