Ravi Sir's Cyber Security Cards › Revision Cards
Web Server Hardening
Web Server Hardening Safe settings for a public web server. PHP: expose_php = Off , display_errors = Off , allow_url_include = Off . Always HTTPS with a valid certificate, and redirect HTTP to HTTPS. A WAF (web application firewall) like ModSecurity or AWS WAF adds a layer against SQLi and XSS. But
Read card text
What this card says
What it is
Safe settings for a public web server.
Key settings
PHP: expose_php = Off, display_errors = Off, allow_url_include = Off.
Always HTTPS with a valid certificate, and redirect HTTP to HTTPS.
Why it matters for security
A WAF (web application firewall) like ModSecurity or AWS WAF adds a layer against SQLi and XSS.
But a WAF is extra, not a replacement for fixing the code.
Learn more in the lesson: 32.5 Web Server Hardening