Website Design Malaysia - Web services provider Malaysia - Web development company in Kuala Lumpur - Thru Vision Design and Solutions

MyPHPIPS (MyPHP Intrusion Prevention System)

admin — Sat, 27 Aug 2011 23:09:14 +0000

What is MyPHPIPS?

MyPHPIPS (MyPHP Intrusion Prevention System) is an open source PHP Web Application Intrusion Prevention System. It was based on PHPIDS (phpids.org) and distributed under the LGPL License. This work is supported by CyberSecurity Malaysia. MyPHPIPS intends to assist the web developer/maintainers to secure their PHP CMS/application deployments without having with minimal resources (i.e time and money)

MyPHPIPS is a portable and less-hassle framework that serves as an extra security layer to defend against invalid/malicious requests to the web application or content management systems.

How does it work?

It uses PHPIDS to calculate an impact value that can come from malicious requests and reacts to them. The attack recognition is based on a set of approved and heavily tested filter rules where any attack is given a numerical impact rating which makes it easy to decide what kind of action should follow the hacking attempt.

Based on the configuration, attacks that exceed the threshold impact rating will be blocked as for the current Alpha release; only error message will appear on the screen. We are planning to enhance the features but you might need to wait for that in future releases.

How to use it?

First of all please download MyPHPIPS from http://code.google.com/p/myphpips/downloads/list

1) Go to the directory where the configuration file is located
2) Upload the whole IDS folder (and the content) there
3) Look for your configuration file. Usually:
a) Joomla: configuration.php
b) WordPress: wp-config.php
c) Drupal: sites/default/settings.php
d) phpBB: config.php
e) myBB: inc/config.php
4) Edit your config file, add the following lines and make sure it is within code tag (if the is not database configuration file, use header/index file):

define(‘MyPHPIPS’, dirname(__FILE__).’/IDS/’);
require_once(MyPHPIPS.’MyPHPIPS.php’);

5) Change the ‘cache’ folder permission inside the IDS folder so that it is writable
6) Test your installation with some attack :- http://www.example.com/yourcms/?page_id=../../../etc/passwd

If you have any problems, please contact us by providing us the full url for your applications and the steps to reproduce the errors in order for our technical support to troubleshooting your issue.

Refference: http://www.mycert.org.my/en/resources/security_tools/main/main/detail/828/index.html

Benefits of having your web hosting hosted under Malaysia Internet Exchange

admin — Sat, 27 Aug 2011 23:06:16 +0000

When it comes to web hosting, many people only have some basic considerations to fulfil whatever that is necessary to host a website. These include the specifications on the web hosting service, be it a shared hosting, virtual private server or dedicated server. The other factor that would determine their choice of hosting would be the price. While these two factors are equally important for choosing a suitable hosting service, other aspects that would truly make a difference to your website include knowing if your web host service is part of any Internet exchange points.

In total there are more than 14 Internet service providers that are signed up under the Malaysia Internet exchange point to this time. Before this, most Internet access service providers would similarly face issues in competitively priced broadband service to meet demands of customers. These Internet service providers would route their local IP traffic to other countries, such as United Stated, Singapore and Hong Kong, who were offering better quality traffic management.

Today almost every country has at least one local Internet exchange point. In Malaysia it is fortunate enough that there’s one that doesn’t rely on other country. To some people, this seems insignificant, but to the country, it has successfully helped to save millions of dollars worth of Internet traffic access if it is to depend on the Internet exchange point of another country.

Hence any websites that are hosted under the web hosting providers that shares the same datacenter and facility as the Malaysia Internet exchange point would be beneficial and supported by multiple ISP. This becomes more reliable when it comes to redundancy of connectivity. Having alternative of multiple Internet service provider would definitely mean more reliability and uptime consistency for web hosting.

Thru Vision is hosted in a datacenter located at the central hub of Kuala Lumpur where business is at peak. It is also where the Malaysia internet exchange takes place.

The benefits of Microsoft SPLA

admin — Sat, 27 Aug 2011 22:59:31 +0000

SPLA that stands for Service Provider License Agreement, which is a program under Microsoft to help clients and users by offering the latest Microsoft software and upgrades through an affordable price from a provider of services or independent software vendors. And their role is to provide clients with the latest updates of software and licensing under an affordable and simple way for clients to enjoy.

Organizations such as web hosting services that hosted Microsoft software would benefit their clients through a customized service with a flexible cost structure and with no start up cost. Customer support on software licensing is one of the main concerns that clients would look out for, the SPLA ensures the lowest cost for clients when it comes to software updates.

One of the key benefits about the SPLA is the difference of how it provides money value to hosting clients. Unlike the traditional way of software evaluation, most have to be paid before even knowing if it is the right software to be used. With SPLA, clients are allowed to access the latest versions of Microsoft software and products. Clients are allowed to test it before buying it for better decision-making factor.

Thru Vision is part of the SPLA program that offers these services to clients, to find out more, visit www.thruvision.com.my.