Paul Scheinast – Page 19 – Feel free to copy, modify and share what you like.

Apache-Cache

If you want to cache the Data in the user cache to avoid high traffic you could enable the cache, I choose for Images 60 Days and for Javascript and CSS 2 Days.

Edit: “/etc/apache2/apache2.conf”:

#cach control 60day
<FilesMatch ".(jpg|jpeg|gif)$">

Header set Cache-Control "max-age=5184000, public"

</FilesMatch>


#cach control 2day
<FilesMatch ".(js|css)$">

Header set Cache-Control "max-age=172800, public"

</FilesMatch>

Maybe this helps you: apache2 Invalid command ‘Header’, perhaps misspelled or defined by a module not included in the server configuration.

Anti SQL Injection

To avoid SQL-Injection you could use this function :

function RES ($string) {return(mysqli_real_escape_string($_SESSION[‘$CONNECTION-DB’],$string));

}

Another solution is to use a cast, this only works for Integer values !

((int)substr($_GET[“VALUE”], 3))

phpMyAdmin

If you want to change the default path of phpMyAdmin to another and then protect the directory for user access via “.htaccess” File.

Edit: “/etc/phpmyadmin/apache.conf”:

Alias /db /usr/share/phpmyadmin

if you take a look into your logwatch and you see something like this :

/phpMyAdmin/scripts/setup.php: 2 Time(s)
       /pma/scripts/setup.php: 2 Time(s)

…. then someone tried to run your phpMyAdmin-Setup.

Edit: “/usr/share/phpmyadmin/.htaccess”:

AuthType Basic
AuthName “Passwortschutz”
require valid-user
AuthUserFile /usr/share/phpmyadmin/.htpasswd

Edit: “/usr/share/phpmyadmin/.htpasswd”:

(you can use a generator like this link.)

test:$apr1$rlF9fMij$B.3S4EoJD1sBoL.pZ2bRj1

this example is for user “test” with the password “1234”.

if you phpmyadmin page is not visible try this:

sudo ln -s /usr/share/phpmyadmin /var/www/

or in our case:

sudo ln -s /usr/share/db /var/www/

but if you have a html folder in www use “/var/www/html”.

SSH-Security

If you want to make SSH more secure dont allow the user root to login and change the SSH port to another port.Only the user “test” could log in, after that he has to use “su” to get root rights.

Edit: “/etc/ssh/sshd_config”:

Port 1024

PermitRootLogin no

AllowUsers test