{"id":232136,"date":"2023-01-21T11:30:00","date_gmt":"2023-01-21T08:30:00","guid":{"rendered":"https:\/\/wordpress.mediadoma.com\/?p=232136"},"modified":"2022-11-10T07:46:10","modified_gmt":"2022-11-10T04:46:10","slug":"vaikimine-on-kuld-reegel-veebiserveri-kataloogides","status":"publish","type":"post","link":"https:\/\/wordpress.mediadoma.com\/et\/vaikimine-on-kuld-reegel-veebiserveri-kataloogides\/","title":{"rendered":"[Vaikimine on kuld] reegel veebiserveri kataloogides"},"content":{"rendered":"

Kui sisestate konkreetse faili asemel veebikausta URL-i, on veebiserveril m\u00f5ned vaikimisi failinimed (prioriteedi j\u00e4rgi), nagu index.php, index.html jne. Kui aga selliseid vaikefaile pole, siis v\u00f5ib-olla loetleb see failinimed (koos linkidega) brauseri praeguses kataloogis v\u00f5i parem ja turvalisem seade oleks selle keelata ja n\u00e4idata 403 lubade keelatud viga.<\/p>\n

WordPressi kaustade, eriti pistikprogrammide kaustade puhul, kus URL-e ei peaks brauseris otse k\u00fclastama, leiate palju index.php-d, mis sisaldavad midagi sellist:<\/p>\n

<?php \/\/You don't belong here. ?><\/code><\/pre>\n
V\u00f5i muus sarnases vormingus:<\/p>\n
<?php\n\/\/ Silence is golden.\n?><\/code><\/pre>\n
Muidugi on palju muud v\u00f5imalikku sisu, mis k\u00f5ik vaikselt kaustade sirvimise keelavad. Kui failid on loendis, v\u00f5ivad m\u00f5ned tundlikku teavet sisaldavad failid paljastada.<\/p>\n
Parem viis on minu arvates indeks.php<\/strong>, millel on j\u00e4rgmised omadused:<\/p>\n
<?php\n\u00a0 header($_SERVER['SERVER_PROTOCOL']. ' 404 Not Found');\n\u00a0 exit(\"<!DOCTYPE HTML PUBLIC \"-\/\/IETF\/\/DTD HTML 2.0\/\/EN\">rn<html><head>>rn<title>404 Not Found<\/title>rn<\/head><body>rn\n<h1>Not Found<\/h1>rn<p>The requested URL \". $_SERVER['SCRIPT_NAME']. \" was not found on this server.<\/p>rn&lgt;\/body><\/html>\");\n?><\/code><\/pre>\n
Sel viisil kuvab see 404 ei leitud viga, mis n\u00e4eb v\u00e4lja nagu t\u00f5eline, eksitades potentsiaalseid h\u00e4kkereid.<\/p>\n
M\u00f5nes kaasatud failis, millele ei peaks otse juurde p\u00e4\u00e4sema, leiate algusest m\u00f5ned kontrollid:<\/p>\n
if (!defined('IN_PHPBB'))\n\u00a0 \u00a0 exit;\n\u00a0\n\/\/ don't load directly\nif (!defined('ABSPATH')) \u00a0 \u00a0 die('-1');<\/code><\/pre>\n
Nii v\u00e4lditakse tundliku teabe v\u00f5imalikku lekkimist, kui brauseris kuvatakse skriptit\u00f5rkeid. Kaustade puhul, mis ei peaks olema t\u00e4ielikult paljastatud, saate lisada faili .htaccess j\u00e4rgmised read<\/strong><\/p>\n
order allow,deny \ndeny from all <\/code><\/pre>\n
Nii ei p\u00e4\u00e4se avaliku URL-i kaudu \u00fchelegi failile juurde. N\u00e4iteks Pluginiteema turvalisuse logi-<\/a> ja varukaustad on seatud sellele.<\/p>\n
:  helloacm.com<\/a><\/div><\/p>\n","protected":false},"excerpt":{"rendered":"
[Vaikimine on kuld] reegel veebiserveri kataloogides<\/p>\n","protected":false},"author":1,"featured_media":224083,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":"","_wp_rev_ctl_limit":""},"categories":[718,833,894,916,1029,842],"tags":[1165],"class_list":["post-232136","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-arendaja","category-juhend-algajatele","category-kood","category-muud","category-ohutus","category-opetused","tag-affiai-et"],"_links":{"self":[{"href":"https:\/\/wordpress.mediadoma.com\/et\/wp-json\/wp\/v2\/posts\/232136","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wordpress.mediadoma.com\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/wordpress.mediadoma.com\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/wordpress.mediadoma.com\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/wordpress.mediadoma.com\/et\/wp-json\/wp\/v2\/comments?post=232136"}],"version-history":[{"count":0,"href":"https:\/\/wordpress.mediadoma.com\/et\/wp-json\/wp\/v2\/posts\/232136\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/wordpress.mediadoma.com\/et\/wp-json\/wp\/v2\/media\/224083"}],"wp:attachment":[{"href":"https:\/\/wordpress.mediadoma.com\/et\/wp-json\/wp\/v2\/media?parent=232136"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/wordpress.mediadoma.com\/et\/wp-json\/wp\/v2\/categories?post=232136"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/wordpress.mediadoma.com\/et\/wp-json\/wp\/v2\/tags?post=232136"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}