I’m hoping this might be a useful snip for somebody. I recently had to install/configure a osCommerce application on a GoDaddy hosted web site. I was using Authorize.Net’s AIM (Advanced Integration Method) for handling payments. No matter what I did, I failed connecting to Authorize’s API. After some heavy googlin’, I came across a similar… Continue reading PHP/cURL payment gateway handling with GoDaddy hosted site

This is article explains how to install amavisnewsql to your existing amavisd sytem. Amavisd-new (http://www.ijs.si/software/amavisd/) is an incredibly powerful application that sits between your MTA and various anti-virus and spam detection software. I’m currently using Amavisd-new with Postfix (http://www.postfix.org/), Spamassassin (http://spamassassin.apache.org/)and ClamAV (http://www.clamav.net/) all wrapped up with a MySQL backend to manage virtual users. In… Continue reading Amavisd Quarantine with amavisnewsql squirrelmail plugin

How to get php’s mail() function to work with mod_security chroot The problem is that php’s mail() cannt send mail in a mod_security chroot environment. Unfortunately, you don’t see any errors and the mail just never gets sent. Let’s assume that you have setup a chroot jail for apache using mod_security (something we will document… Continue reading php’s mail() in apache chroot

Objective: To chroot Apache using mod_security, harden PHP via basic security configurations, harden MySQL and allow our chroot’d Apache to connect to MySQL socket. MOD_SECURITY ModSecurity is an open source intrusion detection and prevention engine for web applications. Operating as an Apache Web server module, the purpose of ModSecurity is to increase web application security,… Continue reading Apache/PHP4/Mysql hardening techniques (including chroot)