Web applications often store dynamic data in folders together with the application. From WordPress to Magento, many open source apps default to intermingling the data with the application folder structure. Although this provides a simpler deployment and ease of installation for newcomers, it also provides a significant security loophole for exploit by hackers.
Continue reading
Tag Archives: Software Sagacity
WordPress Shopping Cart – How to Use Custom Meta Variables
While the WordPress Shopping Cart plugin is far from a comprehensive online store, it still provides an easy and cheap way to sell products online. Although the stock implementation might work well for a simple product catalog, many users will need to customize the product listing based on product settings. In order to accomplish this, the cart as a feature called “Custom Meta” variables; we will explore how to use these variables to change the way products are displayed.
Continue reading
Networking fundamentals – what is the IP protocol?
As the Internet has grown, three main protocols have reigned supreme in sending data online: IP (Internet Protocol), UDP (User Datagram Protocol), and TCP (Transmission Control Protocol). Understanding these protocols is key to both designing computer networks and keeping data secure. Foremost among these three protocols is IP, as both UDP and TCP use IP as a base layer for sending their information.
Continue reading
Amazon EC2 Cloud – Resetting the PEM Key
Each virtual server instance in Amazon is secured by a unique file, called the PEM Key Pair. This file needs to be saved onto the client computer in order to access and maintain the cloud server. Unfortunately, these keys can occasionally be lost, such as during a hard drive crash or when switching software vendors.
Continue reading
PayPal IPN Integration – SSL Connection Reset By Peer
When integrating PayPal payment processing into a web application, one of the common errors is “SSL: Connection Reset By Peer.” This cryptic error message can be challenging to fix without the correct set of headers.
Continue reading
Enable and Test URIDNSBL DNS Blocklists with SpamAssassin
SpamAssassin, the most popular open-source spam fighting software, is used by email server administrators to reduce spam and improve user productivity. One of the features of SpamAssassin is dynamic lookups of domain names to see if they are on a DNS blocklist maintained by web authorities.
Continue reading