1. Web Server and Web Site Security

2. Web Server and Web Site Security Web Server Security

3. Web Server and Web Site Security Demilitarised Zones

10. Firewalls filter information coming from the Internet into your private network or computer system. If incoming packets of information is flagged by the firewall’ filters, it’s not allowed through.

12. Information travelling from inside the firewall to the outside is monitored for specific defining characteristics, then incoming information is compared to these characteristics.

14. Application Backdoors

15. Operating System Bugs

16. Denial of Service

17. E-mail Bombs

18. Viruses

19. Spam

20. Redirect Bombs

23. An IDS is composed of several components:

24. Sensors which generate security events,

25. A console to monitor events and alerts and control the sensors

31. Web Server and Web Site Security Common Gateway Interface

33. Web Server and Web Site Security Web Form Validation

34. Web Server and Web Site Security Why we need to validate?

36. You want to ensure that the correct data is going into the fields set in the tables.

37. You don't want alphanumeric characters going into fields that require numeric characters only.

38. Some fields might require specific information to be entered in a specific format, for example email addresses.

40. Client Side Validation will often be done with JavaScript whilst Server Side validation would be performed with a server side language such as PHP or ASP.

41. There are other reasons you would validate your web forms and that is due to vulnerabilities.

43. Web Server and Web Site Security What is SQL Injection?

45. The vulnerability is present when user input is either incorrectly filtered for string literal escape characters embedded in SQL statements or user input is not strongly typed and thereby unexpectedly executed.

47. Web Server and Web Site Security What is Cross-Site Scripting?

48. Web Server and Web Site Security Preventing Cross-Site Scripting

51. Finally, if your form is submitted using the POST method, you should refer to the parameters using a $_POST rather than $_REQUEST, which also helps to avoid certain types of attacks by ignoring information appended to the URL via the query string.