12-04-2017, 03:27 PM
Before we used to use the free web server from nfo which i don't even think we could install a SSL cert.
I did not get to see our site on the free nfo server but i do know nfo's setup and its a security joke its literally 40 people on the same server with their own folder. You can ssh in and even use commands like W and last and history and see everyone's actions everywhere. All the users IP's from ALL the websites.
I cant install an SSL cert without having access to Apache and sites-available to edit the virtual hosts and that was not available on the free nfo webserver. And they sure the hell did not run mod-security.
So moving all this, the forums loading screens ban sites all over to the "SQL Server" was the best move.
At one pint I considered just using a self signed cert and making the user as in YOU being responsible for using HTTPS instead of HTTP. You would have to permit it in the browser because self signed certs are not trusted but THAT option is still better then no option.
I did not get to see our site on the free nfo server but i do know nfo's setup and its a security joke its literally 40 people on the same server with their own folder. You can ssh in and even use commands like W and last and history and see everyone's actions everywhere. All the users IP's from ALL the websites.
I cant install an SSL cert without having access to Apache and sites-available to edit the virtual hosts and that was not available on the free nfo webserver. And they sure the hell did not run mod-security.
So moving all this, the forums loading screens ban sites all over to the "SQL Server" was the best move.
At one pint I considered just using a self signed cert and making the user as in YOU being responsible for using HTTPS instead of HTTP. You would have to permit it in the browser because self signed certs are not trusted but THAT option is still better then no option.
