kevinpirnie

[kevinpirnie]

Proper Website Content Security nGinx Configuration

Wow!  It's been a little while since I have had the time to post another article.   Well, here I am again, back at it. This time, I will show you an optimal way to keep your site secure utilizing a bit of nginx configuration.  You will need to do some work before implementing this, so please do not attempt to simply copy/paste this and expect it to work out of the box. # Default security headers add_header Strict-Transport-Security "max-age=31536000; includeSubdomains; preload"; # enable, cache, and preload subdomains add_header X-Frame-Options "SAMEORIGIN" always; # generally only allow SAMEORIGIN frame sources add_header X-Xss-Protection "1; mode=block"; # protect against Cross-Site Scripting add_header X-Content-Type-Options "nosniff" always; # no sniffing allowed! add_header Referrer-Policy "strict-origin"; # protect agains cross-linking add_header X-Download-Options "noopen"; # force the download, and do not allow direct openning add_header X-Permitted-Cross-Domain-Policies "none"; # protect agains cross-linking add_header X-Robots-Tag none; # only allow robots.txt # Read the full article

[kevinpirnie]

.Net DataReader Wrapper

UPDATE 2.0!!! Wow, just realized it's been awhile since i posted anything... well kiddies, time for some new code. Although I have grown up loveing, carressing, and mutilating Visual Basic, I have decided to take a stab at some C# since most of my projects lately have comes across in the form of PHP.  While I do love VB still, I am starting to fall hard for some C# sexyness ( 0 && _PNs.Length > 0) ? true : false; } else { return false; } } catch { // yes I meant to do this, we really don't need to get the exception here return false; } } else { return false; } } // Get a return message if any private string _Msg; internal string Message { get { return _Msg; } } // Get the connection string from our class assemblies settings internal string _ConnString { get { return Properties.Settings.Default.ConnectionString; Read the full article

[kevinpirnie]

SQL 2012 ZipCode Radius Search

In building my MySQL Store Locator, I figured that it may be a good idea to do the same thing for MS SQL.   Since I have 2012 installed, I built this particularly for that version, and am unsure if it will work in previous versions.  I do know that the Geo datatypes have been severly refined and improved for 2012, so maybe you can keep that in mind when you try this out. Similar situation, I needed something like this built for a 'Store Locator', this time for a .Net site I was building.  I have since decided to add it into my personal webservices which you can see in action here: My Zip Code Service All I'm going to show you is what I did, table, view, and stored procedure codes, and let you figure out the rest on your own. First and foremost is the table structure, you will notice that I have a column in here 'Location' that looks way different than the others.  It's a calculated column containing the Geographical DT representation of the Lat and Lon columns.   Make sure you download the latest ZipCode table from here before proceeding...  you'll need it to populate this table with all the US Zip Codes you will need for this. Without any further ado... (Side Notes: I have created some indices on the view: Clustered/Unique on the zipID Column, Non-Clustered on Latitude and Longitude columns, and Non-Clustered on ZipCode column) Table: . /****** Object: Table . Read the full article

[kevinpirnie]

RunCloud and iThemes for Wordpress

Like most good hosting support folks, security tops the list of my priorities. While a good firewall, and true Web Application Firewall are the best means for helping with this, sometimes shared hosting services will not change the configurations they have in place to support the necessary security for a Wordpress website. In steps the iThemes Security plugin. iThemes acts like a WAF, in that it can detect (via a vast network) bad bots, known hackers, and most known vulnerabilities in Wordpress. I will lay out what I use on all of the sites I manage hosting for (note, this number as of today, is in the thousands), as well as enabling the necessary configuration needed to allow iThemes to do it's thing when you have a nGinx Only Web Application on RunCloud controlled servers. First and foremost, login to your Wordpress admin, then click Add New, under Plugins in the left hand navigation. ( screenshot: https://prnt.sc/q8v5y1 ) In the search box, type in ithemes, when it shows in the returned plugins, click Install then Activate. As you can see here, I already have it installed and activated: https://prnt.sc/q8v6ej Once it is activated, you will need to browse to it's settings, the link is in the left hand navigation under Security ( screenshot: https://prnt.sc/q8v79h ). You can safelly ignore the "Wizard" that will popup the first time you browse to it. Click on Global Settings, check the box to allow writing to wp-config and .htaccess: https://prnt.sc/q8vdqj This Read the full article

[kevinpirnie]

Backup Procedure and Script for SQL Server

This procedure and script are meant for use in situations where your SQL server may not have SQL Agent installed. Whether it is because it's SQL Express being use, or because it simply was not an option at the time of install. First thing you will need to do is login to the SQL server using SQL Management Studio.  Make sure your login is able to create stored procedures at the system level, and add the following to the 'master' database USE GO /****** Object: StoredProcedure . Script Date: 08/17/2011 10:55:54 ******/ SET ANSI_NULLS ON GO SET QUOTED_IDENTIFIER ON GO -- ============================================= -- Author: Microsoft -- Create date: 2010-02-06 -- Description: Backup Databases for SQLExpress -- Parameter1: databaseName -- Parameter2: backupType F=full, D=differential, L=log -- Parameter3: backup file location -- ============================================= ALTER PROCEDURE . Read the full article

[kevinpirnie]

SSL and Your Wordpress Site

Many people think securing a website with SSL (SSL encryption) is necessary only if they’re selling products or services via their website and collecting credit card or payment information. What many website owners do not realize is that SSL encryption has other very important benefits for small business owners. To understand the benefits of having an SSL certificate installed for your website, it helps to understand what SSL is and actually does. What exactly is SSL encryption? SSL, which stands for Secure Sockets Layer, is an encryption technology that creates a secure connection between your website’s server and your website visitor’s web browser. This allows for information to be protected during transmission between the two. Without SSL encryption any computer could intercept the transmission from your browser to the server. This includes the transmission of credit card numbers, usernames and passwords, and other sensitive information. When your site is secured you’ll see that little green lock in the left corner of your browser’s location bar, followed by the website URL beginning with HTTPS. Data that is sent using HTTPS provides three key layers of protection: Authentication: Confirms visitors are on the right website, yours, and builds trust. Data integrity: Customer data cannot be corrupted or modified. Encryption: Visitor activity cannot be intercepted while browsing your website. Read the full article

[kevinpirnie]

Dominion n5 v3 - Note 5 Port for n900t - [11/16/2015]

Dominion n5 v3 – Note 5 Port for n900t – [11/16/2015]

Welcome to another installment in the DomPop Family of Roms. (insert applause here…)

I will get these out of the way right now, so please make sure you read:

I AM IN NO WAY RESPONSIBLE FOR YOUR DEVICE NOR ANYTHING THAT COULD HAPPEN AS A RESULT OF FLASHING THIS ROM. MAKE SURE YOU MAKE YOUR BACKUPS, PRIOR TO FLASHING!!! I CANNOT AND WILL NOT SUPPORT ANY AND ALL KERNELS OTHER THAN WHAT IS FLASHED…

[kevinpirnie]

Ultimate Scalable WordPress Friendly LEMP(H) Stack Part Two

Ultimate Scalable WordPress Friendly LEMP(H) Stack Part Two

So after many months of studying, I have finally found the solution I have been looking for.

A scalable solution to high traffic WordPress sites on a linux server.  In this case, a LEMP(H) stack.   LEMP stands for Linux, Nginx, MySQL, & PHP (and I added the H in there as I will be utilizing HHVM for fastcgi, and for my scenario I chose the latest Ubuntu 14.04 LTS Server.

During initial install, I…

[kevinpirnie]

Those Darn Bots & How to Protect Against Them

Those Darn Bots & How to Protect Against Them

Every new site wants to get their piece of Google, Yahoo, & Alexa.  Yes I said it, Alexa ;)

There is a bit of a risk when allowing these bots to traverse your endless universe of pages, posts, and other niceties that you want to get out there an noticed.  Keep in mind, these 3 Search Engines arent the only ones looking for your site and content.  There are millions of bots out there just…

[kevinpirnie]

Linux/Kernel Tweaking ~ Team-DomPop Style

Linux/Kernel Tweaking ~ Team-DomPop Style

I wanted to make sure I got this here, before I forgot what I did to make these awesome tweaks.  They should be pretty universal, so long as you can make the edits to the kernels ramdisk.  (See your kernel provider for permission and details).  I'm going to break this up into sections to make it easier for me to read.

GOALS

My goals for this were pretty simple.

Low Level Configuration

[kevinpirnie]

Team DomPop - Ramdisk Edits

Team DomPop – Ramdisk Edits

I wanted to make sure I got this here, before I forgot what I did to make these awesome tweaks.  They should be pretty universal, so long as you can make the edits to the kernels ramdisk.  (See your kernel provider for permission and details).  I’m going to break this up into sections to make it easier for me to read.

GOALS

My goals for this were pretty simple.

Low Level Configuration

Faster Boot…

[kevinpirnie]

Team DomPop Presents - The Dom

Team DomPop Presents – The Dom

Team DomPop Proudly Presents The Dom

S6 Full Port for the Note 3 N900T

Before we get started I want to put these out first and foremost

I AM IN NO WAY RESPONSIBLE FOR YOUR DEVICE NOR ANYTHING THAT COULD HAPPEN AS A RESULT OF FLASHING THIS ROM. MAKE SURE YOU MAKE YOUR BACKUPS, PRIOR TO FLASHING!!!

I CANNOT AND WILL NOT SUPPORT ANY AND ALL KERNELS OTHER THAN WHAT IS FLASHED WITH THIS ROM OR…

[kevinpirnie]

DomPop v5 Bloatware

I’ve thrown together a *.rar archive of all the stuff I thought was bloat for DomPop v5

This includes the following apps & is not flashable.  To install these apps, you must push them to their proper locations in your /system partition, and set 755 on the folders, and 644 permissions on the *.apks

It contains:

/system/app

AllShare Apps

ANT Service Apps

Bloomberg

Test Apps

Blurb

Google Books

ChatOn

[kevinpirnie]

Google Play Store Issues

Google Play Store Issues

Since you’re reading this post, I assume that you’ve been experiencing troubles while installing apps from Google Play Store from your Android device. Google Play Store is the largest app store for Android apps and games which acts as a giant hotspot for all the Android users. Few minutes of browsing apps in the Google Play Store would leave you craving to search for more and more apps.

On the…

[kevinpirnie]

DomPop Tweaked Lean Kernel - UPDATED 7-2-2015

DomPop Tweaked Lean Kernel – UPDATED 7-2-2015

By no means to I want or need kudos for this.  The majority is Imoseyon‘s hard work on LeanKernel for the Note 3

I have however, gotten permission, and made some modifications to the ramdisk and have made my Note, run better than the Note 4, S5, & S6 :)

Without any further ado, I present:

DomPop Tweaked LeanKernel

7/leanKernel is not for everyone. Our philosophy is to keep the kernel footprint as…

[kevinpirnie]

DomPop v5.4 Lollipop 5.0 ~ Note 3 N900T Rom UPDATE 7.1.2015

DomPop v5.4 Lollipop 5.0 ~ Note 3 N900T Rom UPDATE 7.1.2015

FINALLY LOLLIPOP IS HERE FOR THE TMOBILE N900T! Team DomPop is proud to present you with DomPop v.5 (pre-deflated)!

Before we get started I want to put these out first and foremost

I AM IN NO WAY RESPONSIBLE FOR YOUR DEVICE NOR ANYTHING THAT COULD HAPPEN AS A RESULT OF FLASHING THIS ROM. MAKE SURE YOU MAKE YOUR BACKUPS, PRIOR TO FLASHING!!!

I CANNOT AND WILL NOT SUPPORT ANY AND ALL KERNELS OTHER…

[kevinpirnie]

Cpanel Nginx Install and Configuration

Cpanel Nginx Install and Configuration

Install & Configure Nginx on Existing Cpanel Servers

cd /usr/local/src wget http://nginxcp.com/latest/nginxadmin.tar tar xf nginxadmin.tar cd publicnginx ./nginxinstaller install

Once installation completes, login to WHM for that server

Scroll past ConfigServer Security&Firewall to see Nginx Admin and click it

Add the 0 */1 * * * /usr/sbin/tmpwatch -am 1 /tmp/nginx_client to crontab -e on the…