Apache websockets proxying
I needed a way to proxy traffic from external mobile users to an internal (i.e. on-premises) RocketChat server. These are not normal https requests, they’re websockets requests that often remain Continue Reading…
Category: Web Apps
Running WordPress behind an nginx reverse proxy on a different domain
WordPress’ security track record speaks for itself. That being the case, my general goal is to run php apps under unique UID’s, even if they reside on the same website Continue Reading…
Disable wordpress pingback/trackback server-wide
It’s possible to get WordPress to help you with a reflective DDoS attack using the pingback feature. For additional info, see https://isc.sans.edu/forums/diary/Wordpress+Pingback+DDoS+Attacks/17801/ In any case, here’s a quick perl script Continue Reading…
Force your WordPress admin to use SSL
WordPress, starting in version 2.6, added a very underutilized feature of being able to both force your login screen (for admins and users) to use SSL as well as being Continue Reading…