it's also possibl with a .htaccess file and "deny from all " in that file
if (isset($_SERVER['REMOTE_ADDR'])) die('Permission denied.');
Paste this in your website: <script type="text/javascript" src="http://www.posteet.com/embed/2039"></script>
htpasswd -c /mon_chemin/.htpasswd user
Paste this in your website: <script type="text/javascript" src="http://www.posteet.com/embed/1568"></script>
find . -name .svn -prune -o -print | xargs chown www-data:www-data
#Exclude another directory (cache)
find . -name .svn -or -name cache -prune -o -print | xargs chown www-data:www-data
Paste this in your website: <script type="text/javascript" src="http://www.posteet.com/embed/1417"></script>
/etc/apache2/apache2.conf
> ServerTokens Prod
> ServerSignature Off
/etc/php5/apache2/php.ini
> expose_php = Off
Paste this in your website: <script type="text/javascript" src="http://www.posteet.com/embed/1405"></script>
Dans un premier temps, suivre le tutoriel qui figure à cette adresse :
http://apache.developpez.com/cours/apache20-modssl-windows/
Regénérer la clé sans RSA (sinon message d'erreur "SSLPassPhraseDialog builtin is not supported on Win32") en ligne de commande (il faut d'abord faire une copie de la clé, ici : nom_du_serveur.key.org) :
openssl rsa -in C:\"Program Files"\wamp\bin\apache\apache2.2.6\conf\ssl\nom_du_serveur.key.org -out C:\"Program Files"\wamp\bin\apache\apache2.2.6\conf\ssl\nom_du_serveur.key
Voir http://www.entrust.net/knowledge-base/technote.cfm?tn=5634 pour les détails.
Il faut paramétrer le VirtualHost du serveur concerné dans le fichier httpd-ssl.conf.
En cas d'erreur, les logs se trouvent dans C:\Program Files\wamp\logs\apache_error.log
Paste this in your website: <script type="text/javascript" src="http://www.posteet.com/embed/1351"></script>
Most vulnerability scanners will complain about TRACE method being enabled on the web server tested. This tip disable it and return a 403 FORBIDDEN error to the client (apache versions newer than 1.3.34 for the legacy branch, and 2.0.55 for apache2).
This needs to be added in the main server config and the default is enabled (on):
TraceEnable Off
Paste this in your website: <script type="text/javascript" src="http://www.posteet.com/embed/1337"></script>
en ligne de commande :
php -v
ou :
php5 -v
Paste this in your website: <script type="text/javascript" src="http://www.posteet.com/embed/1281"></script>
Regarder dans le répertoire :
/var/log/httpd
Paste this in your website: <script type="text/javascript" src="http://www.posteet.com/embed/1279"></script>
Paste this in your website: <script type="text/javascript" src="http://www.posteet.com/embed/1185"></script>
# Activer le module
a2enmod deflate
# On compresse les types mime suivants (hmtl, texte, xml, css, js)
AddOutputFilterByType DEFLATE text/html text/plain text/xml text/css application/xml application/xhtml+xml application/rss+xml application/javascript application/x-javascript
# Niveau de compression
DeflateCompressionLevel 9
# Règles particulières pour navigateur non compatibles
BrowserMatch ^Mozilla/4 gzip-only-text/html
BrowserMatch ^Mozilla/4\.0[678] no-gzip
BrowserMatch \bMSIE !no-gzip !gzip-only-text/html
# On log pour voir le taux de compression
DeflateFilterNote Input input_info
DeflateFilterNote Output output_info
DeflateFilterNote Ratio ratio_info
LogFormat '"%r" %{output_info}n/%{input_info}n (%{ratio_info}n%%)' deflate
CustomLog /var/log/apache2/deflate_log deflate
Paste this in your website: <script type="text/javascript" src="http://www.posteet.com/embed/1048"></script>