If you performed a default install of ModSecurity but never modified the configuration or completed any other steps the chances are that you are not logging any ModSecurity items. Typically you just need to add a directory structure with the proper permissions and then ModSecurity will do the rest as far as generating the files…
The other day while configuring a Asus RT-N16 wireless router we had installed DD-WRT software on I decided to turn off HTTP access to the web admin interface. After making this change I got pulled away to test something else and never tested it so I was surprised when I attempted to login today and…
Earlier when mirroring a Zen Cart online store for a customer to work on some custom modifications for him I ran into an error when attempting to visit the site in a web browser. The issue relates to Rewrite rules in the .htaccess file which I was able to easily track down by viewing the…
I received the below error when troubleshooting an issue reported to me by a client regarding one of their intranet web sites not working properly. After some poking around I noticed that there were numerous segmentation faults being reported in the Apache error logs. I had previously set up the server to dump core files…
After upgrading PHP recently on a CentOS Linux server from PHP 5.2.X to PHP 5.3.X I ran into numerous minor issues. One of the issues was with a web application that requires the ionCube PHP Encoder libraries to function properly. After upgrading PHP I noticed some errors in the Apache error logs including the ionCube…
I recently upgraded a CentOS Linux servers PHP from 5.2.X to 5.3.X and ran into a couple minor issues along the way. One of the issues was the fact that one of my applications was complaining about PHP’s date function by letting me know that it could not rely on the system’s timezone setting. Fixing…
Recently I upgraded PHP 5.2 to PHP 5.3 on a CentOS Linux server because of a PHP 0day and noticed an error complaining about ZendOptimizer-5.3.so which is the library loaded into PHP. After some research I found out that it doesn’t look like Zend Optimizer is available for PHP 5.3 on CentOS Linux and will…
I received a comment on one of the QD posts earlier today that noted the Facebook link-share button posted an incorrect link on Facebook. These social media buttons exist on the bottom of each article on the Question Defense site. Initially when looking into the issue I was confused because he actual URL that was…
Yesterday I wrote an article about securing your /tmp and /var/tmp directories on a Linux server because I had found some files uploaded to the /tmp directory via the apache user. After locking down those directories I wanted to verify that there were no other issues on the server so I installed Rootkit Hunter and…