Last night, I read a chapter on PHP security from apachesecurity.net. Therein, I found some practical points that can be used to secure PHP’s configuration and its interaction with Apache. Assume we already turned on safe_mode for PHP, per my article on how to secure wordpress server and other LAMP application servers. Read the rest of this entry »
Last night I added the post list functionality to SEO Dave’s almost-spring-adsense theme by copying the functions from his Blix-adsense theme . When previewing the new post list on this site running Wordpres 2.1 on FC6, I noticed the very single post is listed in the ‘most recent posts’ list on the sidebar as well. That’s a bit unusual. Read the rest of this entry »
So far, most of the traffic to this site was referred by Google Search or alike. More often than not, readers land on a single post. I believe a list of recent posts would appeal more to the readers to hang around than the current page list. This site uses SEO Dave’s almost-spring-adsense theme with a few of my own tweaks. Almost-spring-adsense theme doesn’t have post list at all, while the Blix-adsense theme does. Read the rest of this entry »
Last saturday I wrote about how to adjust SELinux policy to grant access currently denied on fedora core linux 6. Therein a set of SELinux audit messages were used to generate a local policy module package to grant access currently denied and logged in these audit message entries under Fedora Core 6. The module was then loaded to the running kernel, to allow Apache process to call on Postfix to send out email notifications for the wordpress blog comments.
Well, today, I found another set of audit messages regarding rotatelogs. rotatelogs is used on this wordpress 2.1/Fedora Core 6 server to rotate Apache logs (access_log and error_log) every two weeks, without having to restart Apache for the same purpose, graceful or otherwise. Read the rest of this entry »
I was eyeballing who is referring traffic to this site, when I noticed www.domain.example.com in there. The rest of the site traffic is from Google Search or direct landing on the main page or feed. I copy+pasted the site name to Firefox. There, I found the full content of a post I wrote earlier this morning. It was filed on that site as if it were the site’s very own! The only thing to attribute the post to this site, the original author, is a ‘original post’ link at the bottom of the full blog post.
Googling found many discussions about this type of content piracy. So, it is not that unusual as I initially thought. Since www.domain.example.com is a publisher using Google Adsense, it violated the Google Adsense policy changes effective recently. I reported as such to Google Adsense via email as instructed on its blog. Read the rest of this entry »
