In Plesk, you can disable on a per-domain basis PHP’s safe_mode. Before doing this though, be advised that disabling safe_mode could lead to security risks for all of your domains on the server. Read the rest of this entry »

If you need to password protect a directory that is hosted under a subdomain with Plesk, you’ll find that it is not quite as easy as protecting a directory that is avaliable directly from the main domain. Read the rest of this entry »

Running a check on Apache’s default logs (/var/log/httpd/access_log), I found attempts to exploit the server thru a “backdoor” in Horde.

I haven’t fully checked what could be done with this exploit but certainly leaving the affected script unprotected is an open invitation for trouble. Read the rest of this entry »