Quick Online Tips (QOT) » Domain Hosting

How to Hide PHP Version in Site HTTP Headers

QuickOnlineTips — Sat, 26 May 2012 06:50:47 +0000

Home > Blogging > Domain Hosting > Security

You must hide PHP version of your server in site headers for better site security. It is essential that you keep your PHP version updated on your server as newer versions help to fix security bugs, besides getting new features. I found that even after you turn off server signature to hide server details and your Apache version, the X-Powered by PHP version still appears in the site headers.

For example, if you simply check site headers of some site, you will get X-powered-By: PHP/5.3.10

While you thought only you could find PHP version of your server, or needed a PHP version plugin, now you see how easy it is for anyone to see your server details. And hackers can easily find out known security holes of that version and attack your server.

Hide PHP version

So how to hide PHP version. Servers display the PHP version by default due to expose_php, a core PHP.ini configuration directive. So you need to turn it off.

Login to your server via FTP. I use Filezilla FTP Client.
Find php.ini file on your server. Usually the global php.ini is located in /usr/local/lib/php.ini (but can vary depending on your server configuration and PHP installation. Check your hosting level for access and permissions)
Save a backup copy of your php.ini file (in case something goes wrong, restore it)
php.ini is a simple text file and can be edited in any text editor like Notepad. Add the line
expose_php = off
Save the php.ini file and upload to same location (do not save as .txt).

Now check your site headers check and you will find the entry of X-powered-by: PHP/[ version] will disappear. This is helpful as it does not expose your old PHP version on the server to known security holes and prevents hackers from getting secure server information.

NOTE: It’s a bad idea to mess with your php.ini file. If you don’t have sufficient technical expertise, and can’t fix it yourself, ask your web hosting service support to fix it for you easily.

After reading this article, readers liked these articles

Original Article: How to Hide PHP Version in Site HTTP Headers

Turn Off Server Signature for Better Server Security

QuickOnlineTips — Fri, 18 May 2012 06:54:33 +0000

Home > Domain Hosting > Security > SEO

Do you turn off server signature for better site security? Just like you turned off the visibility of your WordPress version, why do you want hackers to know about your server signature which clearly displays your private server details like your Apache version.

Server Signature

It is very easy for anyone to view your Apache versions and other installed critical software on your server, and if you don’t upgrade your server software like Apache to the latest versions, and fail to fix security issues which these upgrades fix, then you don’t want anyone online to be aware about your server details. Any simple online tool will show HTTP site headers of any site. This is a sample site I checked.

As you can see it is very easy to see all the server details, and hackers can get a good idea about servers which haven’t been upgraded to the latest software versions, which means to say that your server is not adequately patched with security fixes and is prone to hacking.

Turn off server signature

So if you want to quickly check if your site hosting server is revealing your server signature to the world, simply use this site to check server signature and you can find out if your server signature is off. It is a good idea to turn off your server signature for better site security.

How do you turn off server signature? Well we got our amazing hosting service provider Knownhost to fix the issue. Our hosting service fixed the issue after we sent them an support request quickly. Probably if you are an expert in managing servers (like many amazing QOT readers!), you can fix it yourself.

They informed me that they added the following values in the Apache configuration file to switch off the Server Signature.
ServerSignature Off
ServerTokens ProductOnly

If you login to WHM > Service Configuration > Apache Configuration

Now with the server signature off, see how your HTTP site headers will look like.if

I just browsed the server details of several top websites, surprisingly which are running on very old software versions! So what are you waiting for, if went ahead to hide WordPress version, then you should go ahead and switch off server signature right now for better server security and site safety.

After reading this article, readers liked these articles

Original Article: Turn Off Server Signature for Better Server Security

Google Ends Search Traffic to Parked Domain Names

QuickOnlineTips — Fri, 02 Dec 2011 12:08:54 +0000

Home > Domain Hosting > SEO

A new Google algorithm update heralds the end of Google traffic to parked domain names. Many domainers and webmasters usually park hundreds of keyword rich domain names and monetize them through advertising programs like GoDaddy Cash Parking and Google Adsense for Domains.

Google Search has revealed that this new update brings in a new classifier which will affect parked domain traffic.

New “parked domain” classifier: This is a new algorithm for automatically detecting parked domains. Parked domains are placeholder sites that are seldom useful and often filled with ads. They typically don’t have valuable content for our users, so in most cases we prefer not to show them.

A parked domain name displays a temporary web page when people type your domain name in a web browser. People usually park domain names till they decide to create a website, find a hosting provider, or simply to hold and sell domain names later. Till then most decide to make money online with the page, which might draw some Google traffic at least.

If you look around at parked domain names, typically they are keyword rich for targeting specific traffic and have no useful content. Moreover, while the domain is parked, domain owners decide to install advertising programs, which also brings in advertising revenue on the side. Since the parked domain page is full of ads only, there is a high chance the visitor who reaches such a page will click through and make money for the domain owner.

Many domain name registrars offer domain parking monetization services. GoDaddy Cash Parking is a service from Godaddy domain registrar, which displays ads on parked domains and domain owners can earn 60-80% of the ad revenue. They charge $4-$5 per month for the basic plan service. Google Adsense for Domains is another free popular program by Google, where domain owners can display Adsense ads on their parked domain names to earn free money.

Now Google is set to change all that … and parked domain names will get much lower search engine traffic it seems. This will seriously affect all domain parking income for people who target this monetization strategy. What are your thoughts?

After reading this article, readers liked these articles

Original Article: Google Ends Search Traffic to Parked Domain Names

Google Offers Free Domain Name, Free Hosting to India Businesses

QuickOnlineTips — Wed, 02 Nov 2011 18:16:38 +0000

Home > Domain Hosting > India > Tips

Google India has partnered with Hostgator India to offer free .in domain names and free hosting for business websites in India. Named ‘India Get Your Business Online’, this pioneering program offers free websites, domain and hosting services to small medium businesses (SMBs) in India.

Free Domain Name Hosting to India SMBs

Their goal is host 500,000 small medium businesses in India in next three years through this program. They offer Indian businesses a free, easy-to-build professional website (within 15 minutes), with free .in domain name and hosting for one year, free email addresses (Google Apps account) and free 365 days support. HostGator will also offer free support in creating, hosting and managing the website for 1 year via its toll free call centers 1800-266-3000. They also offer a free coupon of Rs. 2500 INR for Adwords advertising to promote your site.

What is surprising is that though India has appox 8 million small medium businesses, only about 5% have a website! If you own a small business in India, this is a good offer for SMBs to get their brand online for free. You can always cancel and decide to continue to maintain your brand presence after a year for a fee.

They have also posted some success story videos of sites using the service

See for yourself what vijashiviinternational.in or khoslaprinters.in look like.

After reading this article, readers liked these articles

Original Article: Google Offers Free Domain Name, Free Hosting to India Businesses

2 Years on KnownHost VPS Hosting [Review]

QuickOnlineTips — Mon, 25 Jul 2011 08:20:11 +0000

Home > Domain Hosting > Site News » Knownhost

QOT has been hosted on Knownhost VPS hosting for the last 2 years, and I assure you it has been a great hosting experience. A Knownhost review was in order to share with you some reasons why we love Knownhost hosting and recommend it to you .…

We switched from shared hosting to VPS hosting 2 years back. Many QOT readers recommended some powerful VPS hosting options, and many were very skeptical about Knownhost. Well QOT on Knownhost has been really worthwile. Remember to choose the right hosting package

Why Knownhost VPS Hosting?

1. Super quick response time (24×7) – Webhosting issues occur with any hosting service and it is unavoidable. But what is important is that the technical support is responsive quickly to your site and hosting issues. When you send in a support request, you instantly get a automated ticket number, but then every hosting does that. So here is the amazing part – whenever I have emailed Knownhost, they have ALWAYS replied back within 5-20 minutes, 24×7, even on Sundays and holidays. Ever since the day we joined we have been amazed by the amazing tech support and though many people speculated it was true for new customers, it has lasted these years.

2. They know their stuff – What is the use of quick response if your hosting support is inexperienced and they can’t figure what you are talking about. I am sure all of us have had a chance to get that from customer support – if they cant figure out what we are talking about, how will they fix the issue and will keep recommending unrelated fixes to buy time? Well I have never seen more knowledgeable support than Knownhost. They always respond in minutes, they always seems to understand what problem I am suggesting, and always have a solution for it in minutes. I have had a chance to get support from several different support team members, and all of them were brilliant.

3. They manage everything – The good part about managed VPS hosting is that there is someone to manage your server 24×7. Most bloggers have limited knowledge about the intricacies of hosting and running servers. I am glad I took managed hosting, and they have really helped and guided me all along the way. Getting managed VPS hosting is highly recommended so that you can concentrate more on developing content rather than fixing server errors.

4. They are courteous and never laugh at you - what use is it if you explain technical stuff to me in all geeky mumbo jumbo. I am a curious customer and keep questioning them about technical details, which would seem really elementary stuff, yet they have never scoffed at my request and always clearly explained me in the most courteous way.

5. You can fix stuff yourself next time – This is the good reason – whatever the problem is, they explain clearly with all details what they did to fix your server issues / hosting problem, so it becomes a learning experience, such that you can deal with the issue next time yourself. This has been of amazing help and has helped me gain confidence in dealing with several common hosting issues myself. I learnt new things like setting private nameservers and power of CSF-LFD.

6. Excellent uptime – VPS hosting has ensured that our site has maintained excellent uptime. We monitor our site using Montastic, Pingdom and they have always reported excellent uptime. My VS3 plan has me covered for all traffic spikes.

7. Free Upgrades - Over the last few months, Knownhost automatically upgraded the memory and storage of all plans too. Now that was a cool bonus. The current packages are bigger and better. They upgraded hosting in 2009 also, so we have a double powerful package for free in 2 years.

8. Regular Backup – They have regular full backups for your entire server, so when QOT was hacked, they managed to restore the server to the original state quickly. Now we have Vaultpress also to maintain regular wordpress and database backups.

QOT is now over 2 years on Knownhost VPS hosting, and if you are looking for reliable hosting, try Knownhost VPS hosting.

After reading this article, readers liked these articles

Original Article: 2 Years on KnownHost VPS Hosting [Review]

Find Your WordPress PHP, MySQL Versions Now

QuickOnlineTips — Mon, 04 Jul 2011 18:13:05 +0000

Home > Blogging > Domain Hosting > WordPress

WordPress Bloggers must find the PHP version and MySQL version of their hosting server now. The WordPress minimum requirements have changed and if your hosting server PHP and MySQL version is outdated, upon upgrade to WordPress 3.2, your site may not work.

PHP, MySQL Versions in WordPress

The minimum requirements for WordPress 3.1 (current version) are PHP 4.3 and MySQL 4.1.2. But the The minimum requirements for WordPress 3.2 (which is coming very soon) is PHP 5.2.4 and MySQL 5.0. So though most web hosting services would have updated their server, you need to be sure and not get stuck during update.

The easiest way is to install the Health Check Plugin – Its a simple WordPress plugin which will check checks PHP and MySQL versions of your server and compare them with WordPress 3.2 requirements.

We installed it and got an this response.

The response suggests excellent – we are running on PHP 5.2.16 which better than required 5.2.4.

I suggest you also check your PHP and MySQL version and contact your webhosting if your server falls short. Of course, if your hosting provider cannot upgrade your PHP and MySQL, its time to find a new web hosting for your WordPress blog.

After reading this article, readers liked these articles

Original Article: Find Your WordPress PHP, MySQL Versions Now

Register Your .Brand Top Level Domain for $185,000

QuickOnlineTips — Tue, 21 Jun 2011 17:39:18 +0000

Home > Domain Hosting

ICANN has announced that now brands can register their own .brand generic top-level domains (gTLDs) for $185,000 and the process will start soon. This is the biggest change in the domain name system till now and will change the way we view domains and brands.

The current popular generic top level domains are limited like .com, .net, .org and many more. Applicants for their own .brand domains will need to pay $185,000 to process their application and if all goes as expected after a few long months of review, we might see many new gTLDs. Its expensive but its for a purpose so that only big brands will be able to afford it and protect their trademarks, while creating a unique web identity. You can read all the details in the gTLD Applicant Guidebook (.pdf)

Applications for new gTLDs will be accepted by ICANN from 12 January 2012 to 12 April 2012. I guess all brands will again be lining up to register their own trademarks and protect it from cybersquatters.

So the new domains might look like in this in near future …

Infographic by labnol.org under CC license.

After reading this article, readers liked these articles

Original Article: Register Your .Brand Top Level Domain for $185,000

Now Buy Hostgator India Hosting

QuickOnlineTips — Tue, 24 May 2011 07:13:13 +0000

Home > Domain Hosting > India

Hostgator India has launched hosting operations on Indian servers, and promises the same world class hosting services as its US operations. HostGator is one of the 10 largest hosting companies in the world and HostGator India accounts can now be bought at hostgator.in.

This is a big step as big hosting companies recognize the importance of millions of India based sites and the need to diversify their hosting business into India. We got an email from Hostgator offering a free 7 day test / trial account of their shared HostGator India accounts. You can email them to get a beta testing account. This was possibly sent out to current HostGator clients with a billing address in India only.

India Site Owners Advantage

HostGator India will now host your site on servers in India. They have already started an India office at Nashik, Maharashtra which provides 24×7 technical hosting and billing support. This will benefit Indian webmasters and small hosting resellers as their primary working hours will be in India time and you can physically visit the office if needed.

Additionally the latency to the Indian servers from within India and Asia is very low, so you get quick access times leading to quick loading admin/cpanel, faster loading sites with quicker site response time for visitors, without the need for a CDN for your primary Asian traffic.

Hostgator India Plans

The hosting plans and server pricing on hostgator.in are exactly same as US site hostgator.com. However, you will have to pay service tax @ 10.30% extra as required by Indian tax laws.

Right now don’t be surprised to see hosting plans in USD or lack of payment mode by local banks and credit cards, as they will all be integrated soon enough. The wait is over for Hostgator customers in India.

After reading this article, readers liked these articles

Original Article: Now Buy Hostgator India Hosting

Is CSF-LFD Choking Your Site Traffic?

QuickOnlineTips — Wed, 13 Apr 2011 15:30:31 +0000

Home > Domain Hosting > Tutorials

Webmasters should check if ConfigServer Security & Firewall (csf) and Login Failure Daemon (lfd) are choking and throttling your site traffic? Most web hosting setups run ConfigServer Security & Firewall (CSF) – a very popular, highly recommended and excellent firewall, login/intrusion detection and security application for Linux servers.

Add to it the power of Login Failure Daemon (lfd), a process that scans the latest log file entries for login attempts against your server that continually fail within a short period of time and blocks offending IP’s quickly – and you have a very powerful tool against hackers. We also use ConfigServer Security Firewall (CSF) on our Knownhost web hosting, and believe me it is so simple to block your site traffic and if you are not alerted, you might never know.

CSF ConfigServer Security & Firewall Settings

After our hacking episode, we got more aware and learned a lot about the WHM and server settings. An important setting is Connection Tracking Limit or CT_Limit. If you have root access, you can login to your WHM > Plugins > ConfigServer Security & Firewall > Firewall Configuration

Then browse the long list of options and look for CT_Limit. Check what your CT_Lmit looks like.

If the limit is set to 0, then the feature is disabled. BTW this is the default setting. But if a value of lets says 50 is there, it means that if the total number of connections is greater than 50 – the offending IP address is blocked. Now this IP may not necessarily be offending. If you have a high traffic site, you may want to keep higher limits.

In their own words

Connection Tracking. This option enables tracking of all connections from IP addresses to the server. If the total number of connections is greater than this value then the offending IP address is blocked. This can be used to help# prevent some types of DOS attack. Care should be taken with this option. It’s entirely possible that you will see false-positives. Some protocols can be connection hungry, e.g. FTP, IMAPD and HTTP so it could be quite easy to trigger, especially with a lot of closed connections in TIME_WAIT. However, for a server that is prone to DOS attacks this may be very useful. A reasonable setting for this option might be around 300.

Though CSF itself suggests a value of 300, but most web hosts will keep it low. This helps to prevent DOS attacks on a server and is very useful. Now what is great is that when an IP is blocked, CSF will send you email alerts with subjects like – lfd on host.domain.com: IP (source) blocked with too many connections

When we had put a limit of 50, our email inbox was full of hundreds of these alerts everyday. Hundreds of IP addresses were getting blocked and many complained later they were valid users and the site was unavailable to them.

And then the email reveals which IP is blocked and cannnot connect to your site. Fortunately this a temporary block.

Morever, whenever the CSF-LFD tried to block these IPs, there were high resource usage alerts on the web server. Remember raising the limit too much does not serve the purpose for which it was intended. For high traffic blogs, maybe you need to keep the limits higher. So change the CT_Limit and restart CSF to set the new limits.

Now remember it is easy to disable these email alerts. So if your hosting has set you at a very low CT_limit and you don’t get alerts, you have no idea how many valid IP addresses may be getting blocked reducing your site traffic. Shared hosting users never have root access and can never see the settings, while VPS hosting packages and above have root access / WHM access and can check their ConfigServer Security Firewall (CSF) settings.

NOTE: I am not an expert in server management, csf, lfd and server security. The above views represent what we noted as a webmaster and which might be useful information to you. Manipulation of CSF-LFD settings can make your site unusable very easily. Seek professional help from hosting technical support before messing up your settings.

After reading this article, readers liked these articles

Original Article: Is CSF-LFD Choking Your Site Traffic?

Dreamhost Gets Dedicated Server Hosting Starting $69/Month

QuickOnlineTips — Thu, 24 Mar 2011 10:45:17 +0000

Home > Domain Hosting

Dreamhost has relaunched its dedicated server hosting services and current Dreamhost customers can buy dedicated hosting right now and upgrade their hosting services easily for as low as $69/month.

Dreamhost had stopped dedicated server hosting to promote their unique Dreamhost VPS hosting services, which enabled you to pay for the just the server resources you use. Now dedicated hosting is back and they have lined up some cheap dedicated hosting packages.

Dreamhost Dedicated Server Hosting

Dedicated Hosting is the recommended hosting solution for heavily-trafficked websites, CPU-intensive applications, or complex databases. Dreamhost dedicated hosting is available in 3 packages – Half Moon, Full Moon and Blue Moon.

Buy a half moon dedicated server for just $69 / month and you can get the configuration of 2 core, 2 GB RAM, 500GB SATA hard drive, Debian Lenny (5.0 – Stable), One dedicated IP address, managed backup, unlimited bandwidth, 4-hour SLA and a waived set up fee of $99! They promise 24×7 technical support access, 4-hour hardware replacement guarantee policy, full root access, and automatic managed backups of your entire site with no back-up storage capacity limit.

In 2006, this site migrated from Blogger, and we were also on Dreamhost shared hosting. In 2009, Then we migrated from Dreamhost to Knownhost VPS hosting, and considering we pay over $50 for a Knownhost VS 3 package + cpanel – getting a cheap dedicated server for $69 seems like a good deal.

After reading this article, readers liked these articles

Original Article: Dreamhost Gets Dedicated Server Hosting Starting $69/Month