I have a client who specializes in providing training for high-end CAD/CAM applications. They have training modules (currently in .ppt format mostly) that they want to store securely on the server and give out access only to approved customers. Additionally, they want to ensure that these training modules never fall into the hands of their competitors- that is, no downloads.
Does anyone have experience with this kind of thing? Based on their requirements, a few possible solutions come to mind:
1.) Put the training modules in a subdomain that is password protected. Additionally, encrypt the traffic with SSL etc. However, this doesn't solve the problem of users being able to download the files and do what they want with them. Also, it isn't possible to view .ppt files online in a browser, as far as I know.
2.) Use a solution similar to what Lynda.com has. They have an entire online library of training videos that are available 24x7, but customers can only view it, not download it. I think they use some solutions from Adobe to make this possible.
I just want an expert opinion if what I am doing should be considered to be secure (or if there is a more secure way to do what I am doing). I made our hotel's online reservation system and it stores the guests' credit card information.
The card is encrypted using AES (MCRYPT_RIJNDAEL_128) and the key that is used to encrypt/decrypt must be entered from the client side in order to log in. It is not stored on the server. So that my employees do not have to enter it every time they want to log in, it is stored in a cookie on their computer or entered manually if the cookie is deleted. When logged in, I have the key stored in a _SESSION variable in a subdirectory of that account's home directory and have the following attributes (for example):
I have a busy dating website with 30 000 registered users and ~200-600 users online all the time. I would like to offer free email with ~10 MB mailbox to all users.
I have an idea to use scripts provided by b1gmail.de. Its similar to Hivemail or Socketmail. It uses only one POP3 catch-all mailbox and stores all emails in MySQL database, including attachments.
My worries are about MySQL. If I have 30 000 users and each user has some 5000 messages in his/her mailbox: 30 000 x 5 000 = 150 000000
That's 150 million rows in one table!
I know, not all users will have 50000 messages in their mailboxes, but the number of users increases about +2000/month.
I can't imaggine how long time will need MySQL to find messages for each user in the table with 150 000000 rows.
I don't know - maybe it's not a problem at all. I just never had such large tables and I don't know if it's possible at all.
Another problem: I have Fedora Core 2 installed and even don't know yet if it supports files larger than 2 GB.
Maybe it's better to set-up normal POP3 mailboxes for all users instead of using one catch-all box and storing data in MySQL?
do not post warnings about spammers. In the beginning I'll provide email addresses only to "gold" members. I opened this thread because I don't want to set-up a system which will hang after a couple of months because MySQL will not be able to handle it or I will have other unknown problems.
I installed a centos4.7 with ISPCONFIG2 control panel, but any account I create it points to the documentroot of apache.
I am running my server behind a router.
On the /etc/httpd/conf/vhosts/Vhosts_ispconfig.conf the document roots are : Document Root /var/www/web11/web for xxx1.com Document Root /var/www/web10/web for xxx2.net
but when i type ant site, it goes to : Document Root /var/www/
I am running a LAMP server, working to get everything configured and as secure as I can make it. I have been trying to decide weather to change the document root to a different directory, or if it would be better/worse or more/less secure to chown and chmod the current directory.
Any input would be helpful, I just don't want to overlook some small detail as this is my first time handling a server on my own.
I bought a new plesk and created new domains. For some odd reason, all the domains are looking at the default document root.
/var/www/vhosts/default/htdocs/ Rather than going to the domains document root /var/www/vhosts/domain.com/conf
I checked the /var/www/vhosts/domain.com/conf/httpd.include, the document root and all are fine.
I also tried creating vhost.conf and assigning the document root there. /usr/local/psa/admin/sbin/websrvmng --reconfigure-vhost --vhost-name=domain.com -v
Basic question: does it matter where I set the document root for apache on a Linux system? I've googled this but haven't found a good answer.
This is for a VPS server running the Ubuntu (Debian) server os that I'm configuring. I'd prefer to simply create a new directory off the root and set that as the document root in the apache config file. Would this present any kind of security issue?
If that's no good, what's the best choice -- stick to the default?
And I think everything is working. When openingen 127.0.0.1 I see the apache message that the server is running and when executing phpinfo() it displays the PHP info.
My problem is that I'm trying to change the document root.
After this I did a reboot of the apache server using the CMD httpd -k restart. I even tried restarting using the apachemonitor and rebooted the whole server. But apache still loads the files from c:/Apache24/htdocs
I can't find any more entries with htdocs to change. What am I missing?
I've done some manual change of document root in httpd.conf for a user. I know that now, I don't need to to manual change since user can set there own folder!
Now, If I rebuild Apache, he will re-do all the configuration to the original one. Where can I find the settings for domain document root so I can change it and EasyApache will rebuild the httpd.conf correctly?
I don't want to remove the domain since I'll lost all email account!
However, I plan on running multiple website (not linked whatsoever) on the server. I have LXAdmin and HyperVM. Is it possible to get additional files, such as:
/home/site2/public_html/
then etc..
/home/site3/public_html/
Is this possible? Because, would each need its own IP for the DNS?
I am trying to configure Apache 2.2 on Linux Mint 17 ( derived from Ubuntu 14 LTS).
I am wanting to create a variety of localhost sites all for development. One of those is built on Laravel 4. I have followed every tutorial I can find yet, for some reason which I do not understand ALL my sites route back to the Laravel root document when called from the browser. Just don't get it.
Here is my hosts file:
Code:
127.0.0.1 localhost 127.0.1.1 vince-XPS-8300 127.0.0.1 auburntree 127.0.0.1 example
There is a bug in the current Plesk version 12, which was encountered on many of our Plesk 12 server until now. I do have Plesk 12.0.18 Update #23 with CentOS 6.
When a customer changes for example the document root of a domain nginx does not recognize it and the administrator of the server do have to restart nginx manually.
This issue is serious because CSS, JS and images are not working on such a page where a customer changed the document root. Nginx is throwing 404 error until nginx is restarted manually.
Other customers do have the same issue: [URL] .....
Is there anyway to emulate the functionality of the ErrorDocument using rewrite rules, redirects, rewrite conds or other methods.
I'm trying to create a 404 page that can use dynamic variables (not allowed in ErrorDocument), that serves a custom 404 page and also logs a 404 in the HTTP status code in the logs.
I can achieve one or the other but not both as the ErrorDocument does.
i am relatively new to Plesk, i ordered a vserver with Plesk a couple of months ago and spend a lot of time setting everything up and developing several new websites. I am used to developping new websites on a hidden adress (sth like domain.com/dev/ instead of the top level) and then switch the document root to point to the hidden directory when all is done. This practice has served me and my clients well for the last 10 years.
Using the Plesk features like built-in applications seemed like a good idea at the time but wanting to switch the new websites live i have now found out that Plesk won't let me do this since..It is impossible to change document root because there are web applications installed on this website.
I had read somewhere on the interweb that the v12 would let me do this so i just spent the better part of today updating to v12 .. but alas no luck, the limitation is still there. Is there a way to remove this limitation ?
I tried searching for this, but haven't found the solution. I currently have a VPS I'm not using for anything else, so I thought it would make a good file server for sharing files between my home and office computers. Ideally, I'd like to do this via SMB/Samba so I could map a windows network drive to a directory on the VPS from both locations.
I've set up SAMBA and it works great via the VPS (ie. smbclient returns that it is sharing the directory, etc...). The problem is I can't get either of the remote machines to connect. I read about a way to do tunneling in PuTTY, which worked. In essence I created a Microsoft Loopback device on the remote machine and ran putty forwarding the samba share port. This worked perfectly, in that I could type "10.0.0.1" (the MS loopback interface) and access my VPS shares on my home machine. However, this isn't ideal, as you have to keep PuTTY running to be able to access the shared drive and you have to keep a live SSH session going.
Does anyone have any ideas as to how to cut out PuTTY from the mix and just be able to do "vps.hostname.comsharename" directly from both the home and office machine. I gather this would be trivial if my home machine and the VPS were on the same network. Would a VPN solution make sense here? Any good recommendations? I think a VPN connection would be much easier to setup and deal with than the SSH tunneling solution.
Searching on here revealed adding a line "hosts allow" with the remote IP into smb.conf; however, that did not work for me. It's still as if the remote machines cannot see the VPS through SMB.
Does anyone know any video sharing script that allows me to display videos from [url]and [url] on my site.
I am not looking for a script that allows my users to upload videos to my site, but a script that uses the [url] and [url]to search and display videos.
I have a dedicated server with whm/cPanel centos 5, however I have an issue with retrieving files between 2 cpanel accounts.
One account is an ssl site [url]and the other cpanel account is [url] Now, the manager since it's on seperate account can't get the files and media stored locally on the other account due to account permissions.
Does anyone know how to hack whm/cpanel to give an account access to another folder in the home directory? I don't really want to give it full root access in case the account gets hacked.
Im doing an iphone app related to audio recording. I would like for the user to be able to share these recordings on twitter/facebook. Since you can't encode to mp3 (licensing issue i think), I'll have to do it server side, and then host those mp3s for some period of time (week or month).
I'm wondering if anyone can recommend an inexpensive hosting solution I should look at. Most of the cheaper hosting plans I see would probably consider this as file sharing and not allow it in their TOS.
I thought I would be able to use google appengine, and pay only for whats used... but since it doesn't do direct disk access I don't think there's a way for me to convert to mp3 with them.
It would be private, accessed by about 40-200 students from my faculty. We would share scanned documents and Powerpoint slides that we receive from professors, as well as the latest news such as changes of lecture times etc.
Optimal would be something like Google Groups, but with larger storage (5 GB min). I am therefore considering running ubuntu LAMP on a basic Linode.
what software can i run that provides my group with a Google-groups-like web interface? RSS capability is a plus, so is an easy setup.
