{"id":1423,"date":"2017-05-19T15:26:33","date_gmt":"2017-05-19T19:26:33","guid":{"rendered":"https:\/\/easy-admin.ca\/?p=1423"},"modified":"2017-05-23T10:51:29","modified_gmt":"2017-05-23T14:51:29","slug":"mod_parmguard-for-apache-webserver","status":"publish","type":"post","link":"https:\/\/easy-admin.ca\/index.php\/2017\/05\/19\/mod_parmguard-for-apache-webserver\/","title":{"rendered":"mod_parmguard for Apache Webserver"},"content":{"rendered":"<p>The Apache module that will protect your scripts against hacker&#8217;s input !<\/p>\n<p id=\"N190CC\"><a id=\"apachesc-CHP-12-ITERM-2259\" class=\"indexterm\"><\/a>There is an Apache module, <code class=\"literal\">mod_parmguard<\/code> (<a href=\"http:\/\/www.trickytools.com\/php\/mod_parmguard.php\"><code class=\"systemitem\">http:\/\/www.trickytools.com\/php\/mod_parmguard.php<\/code><\/a>), which is close to providing a complete solution to positive security model requirements. When I checked Version 1.3, the module was not stable for production use, but you should check on it from time to time to see if it improves.<\/p>\n<p><a href=\"https:\/\/www.easy-admin.ca\/mod_parmguard\/mod_parmguard-apache2_1-4.tgz\">Download version 1.4<\/a><\/p>\n<p><a href=\"https:\/\/easy-admin.ca\/mod_parmguard\/doc\/intro.html\" target=\"_blank\" rel=\"noopener noreferrer\">Documentation<\/a><\/p>\n<p id=\"N190D5\"><a id=\"apachesc-CHP-12-ITERM-2259\" class=\"indexterm\"><\/a>Its configuration is XML-based and, for this purpose, easier to use than Apache-style configuration typical for other modules. Here\u2019s a short excerpt from its documentation for a page with a single parameter:<\/p>\n<pre id=\"N190D7\" class=\"programlisting\"><a id=\"apachesc-CHP-12-ITERM-2259\" class=\"indexterm\"><\/a>&lt;url&gt;\r\n    &lt;match&gt;validate.php&lt;\/match&gt;\r\n    &lt;parm name=\"name\"&gt;\r\n      &lt;type name=\"string\"\/&gt;\r\n      &lt;attr name=\"maxlen\" value=\"10\"\/&gt;\r\n      &lt;attr name=\"charclass\" value=\"^[a-zA-Z]+$\"\/&gt;\r\n    &lt;\/parm&gt;\r\n&lt;\/url&gt;<\/pre>\n<p id=\"N190D9\"><a id=\"apachesc-CHP-12-ITERM-2259\" class=\"indexterm\"><\/a>Other interesting features of this module include a spider that analyzes the application and produces configuration data automatically and the ability to generate custom data types and save time writing the <a id=\"apachesc-CHP-12-ITERM-2260\" class=\"indexterm\"><\/a> <a id=\"apachesc-CHP-12-ITERM-2261\" class=\"indexterm\"><\/a>configuration.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-1427\" src=\"https:\/\/easy-admin.ca\/my_uploads\/2017\/05\/synopt-parmguard.gif\" alt=\"\" width=\"690\" height=\"652\" \/><\/p>\n<p><strong>Note:<\/strong> <a href=\"https:\/\/books.google.ca\/books?id=zJUuToRbZ7oC&amp;pg=PA149&amp;lpg=PA149&amp;dq=mod_parmguard&amp;source=bl&amp;ots=RI2WYAgchh&amp;sig=KvdOU6_UALjcF3ZADX5RSi1R0LI&amp;hl=en&amp;sa=X&amp;ved=0ahUKEwjVyeq72PzTAhVBpCwKHcEaDLwQ6AEIWDAO#v=onepage&amp;q=mod_parmguard&amp;f=false\">https:\/\/books.google.ca\/books?id=zJUuToRbZ7oC&amp;pg=PA149&amp;lpg=PA149&amp;dq=mod_parmguard&amp;source=bl&amp;ots=RI2WYAgchh&amp;sig=KvdOU6_UALjcF3ZADX5RSi1R0LI&amp;hl=en&amp;sa=X&amp;ved=0ahUKEwjVyeq72PzTAhVBpCwKHcEaDLwQ6AEIWDAO#v=onepage&amp;q=mod_parmguard&amp;f=false<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>The Apache module that will protect your scripts against hacker&#8217;s input ! There is an Apache module, mod_parmguard (http:\/\/www.trickytools.com\/php\/mod_parmguard.php), which is close to providing a complete solution to positive security model requirements. When I checked Version 1.3, the module was not stable for production use, but you should check on it from time to time &hellip; <a href=\"https:\/\/easy-admin.ca\/index.php\/2017\/05\/19\/mod_parmguard-for-apache-webserver\/\" class=\"more-link\">Continue reading <span class=\"screen-reader-text\">mod_parmguard for Apache Webserver<\/span><\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"slim_seo":{"title":"mod_parmguard for Apache Webserver - HP Server","description":"The Apache module that will protect your scripts against hacker's input ! There is an Apache module, mod_parmguard ( http:\/\/www.trickytools.com\/php\/mod_parmguar"},"footnotes":""},"categories":[1],"tags":[],"class_list":["post-1423","post","type-post","status-publish","format-standard","hentry","category-general"],"_links":{"self":[{"href":"https:\/\/easy-admin.ca\/index.php\/wp-json\/wp\/v2\/posts\/1423","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/easy-admin.ca\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/easy-admin.ca\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/easy-admin.ca\/index.php\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/easy-admin.ca\/index.php\/wp-json\/wp\/v2\/comments?post=1423"}],"version-history":[{"count":0,"href":"https:\/\/easy-admin.ca\/index.php\/wp-json\/wp\/v2\/posts\/1423\/revisions"}],"wp:attachment":[{"href":"https:\/\/easy-admin.ca\/index.php\/wp-json\/wp\/v2\/media?parent=1423"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/easy-admin.ca\/index.php\/wp-json\/wp\/v2\/categories?post=1423"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/easy-admin.ca\/index.php\/wp-json\/wp\/v2\/tags?post=1423"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}