Archive for the 'Security' Category

Why should you avoid .htaccess files

Thursday, June 26th, 2008

In order to make Apache .htaccess work on your servers you also need to add the AllowOverride directive inside

The first of these is performance. When AllowOverride is set to allow the use of .htaccess files, Apache will look in every directory for .htaccess files. Thus, permitting .htaccess files causes a performance hit, whether or not you actually even use them! Also, the .htaccess file is loaded every time a document is requested.

If you are running a big site and you are concern about performance then you should start by removing .htaccess files and moving them to your config director.

Read the rest of this entry »

The mistery behind cookies… are they good or bad?

Thursday, June 12th, 2008

Cookies are great, I eat them all the time, however, this article is about a different type of cookie. Browser /HTTP cookies. The big question is: Are HTTP cookies good or bad. I keep getting this question from non-techy people and some techy people “think” they know the answer… (Including me! jk)

I don’t have the right answer, but I’ll clarify things for you, and then you can make your own judgement whether cookies are good or bad.

Is really how you used them. In the hands of a sloppy programmer HTTP cookies can be VERY bad, but if you are a good and detailed-oriented programmer, cookies are going to be VERY good (sometimes!)

“The term “cookie” is derived from “magic cookie,” a well-known concept in UNIX computing which inspired both the idea and the name of HTTP cookies”. - Wikipedia In a nutshell, cookies are text files stored in your computer containing data that’s typically set by a server.

In order to truly understand cookies you also need to understand HTTP packets and a little bit of how the internet works. I’ll cover a little bit of everything here.

Read the rest of this entry »