How to Stop XMLRPC Attack in WordPress
XMLRPC Attack Saw a HTTP attack, it sent 12 to 20 requests per second on /xmlrpc.php, then made web server jam. In HTTP access log,… Read More »How to Stop XMLRPC Attack in WordPress
403 Forbidden
Deny Browsing via IP Address
Visitors may sometimes access your server by a pretty raw manner which contains the most specific matching IP address. For instance, suppose the server IP… Read More »Deny Browsing via IP Address
PHP Validate URL
You don't have to retrieve all content of a URL to determine the page is valid or not, just get the status code from URL's… Read More »PHP Validate URL
Return "404 Not Found" Instead of "403 Forbidden"
Just like I said in the post How to Prevent Visitors From Accessing Non-Critical Directories. Another issue that we should be aware of, is the… Read More »Return "404 Not Found" Instead of "403 Forbidden"
Limit Access Directory
In this post, I will talk about how to protect non-critical but sensitive directories from accessing by visitors. For real critical directories, such as /wp-admin… Read More »Limit Access Directory
How to Forbid Directory Listing by Apache httpd Server
If there is no index or default www file in directories, httpd returns the contents of directory instead like this. Index of /temp Name Last… Read More »How to Forbid Directory Listing by Apache httpd Server