Sec upgrade cool idea for u #240
Open
opened 9 months ago by Ghost
·
3 comments
Loading…
Reference in new issue
There is no content yet.
Delete Branch '%!s(MISSING)'
Deleting a branch is permanent. It CANNOT be undone. Continue?
hi! If you were to rename .accounts .bans .keywords .logs .posts .reports and .tinyib.db to names that start with .ht tinyib would have greater overall security. Just put .ht in front of them like .htaccounts .htkeywords .htlogs and so forth.
On nginx, tons of sites are configured with
location ~ /.ht {
deny all;
}
If not, one can easily add the code to the server block nginx config. THEN, renamed, for example .httinyib.db, the sqlite3 db, would not be able to be downloaded!! Same for the flatfile if it is renamed to something that starts with .ht.
So if you were to rename everything, the simple short code of location ~ /.ht {
deny all;} could be used to make tinyib much more secure for flatfile or sqlite3 and for everything.
oah and how come numbers don't show up on your site here? Im visiting from a tor browser, any number is invisible...kinda odd. for example when it shows the number of how many days since you fixed stuff. also when i type a number its invisible.
afaik you only have to disable access to a single folder for all these files to not be accesible, I think the current filenames are fine