inicenter logo
Project: Home Web Server:
UniServer 3.4 logo
 Putting Servers On-line
uniform server logo

If you followed the previous section security check list your servers are placed on-line whenever you are connected to your service provider and the servers are running. If you have, a domain name point it to the IP address where your servers are located and that’s it.

Security check list summary:

1) Change the username:password for the Admin Panel

Change the two files as shown. Chose a suitable name and password I am using name mike and password fred123

Uniform Server3_3\Uniform Server\diskw\htpasswd\home\admin\www\.htpasswd ...1)

# root:root
#name:password

mike:fred123

Comment out the local host lines and un-comment last four lines. This allows the above user name and password access to apanel via the Internet.

Uniform Server3_3\Uniform Server\diskw\home\admin\www\.htaccess ...A)
 # This file provides security to the server limiting access to the localhost only.
  # Comment to deactivate.

#Order Deny,Allow
#Deny from all
#Allow from 127.0.0.1

# To disallow execution of cgi scripts in this directory comment next two lines.

AddHandler cgi-script .bat .exe .pl .cgi
Options +ExecCGI

# To unlock Admin Panel, comment the next 4 lines.
# Defaults: Username - admin; Password - userver

AuthName "Uniform Server - Admin Panel 1.0 Alpha"
AuthType Basic
AuthUserFile /htpasswd/home/admin/www/.htpasswd
Require valid-user


2) Change the username:password for the server (your web space)

If you want everyone on the Internet to view your web site there is no need to change the password file ".htaccess" I have shown this for completeness.

Uniform Server3_3\Uniform Server\diskw\htpasswd\www\.htpasswd ...2)

# root:root
#name:password

john:smith123

If you want your web site viewable by every one on the Internet and do not run any cgi scripts just delete the htaccess file or just comment out all the lines as shown:

Uniform Server3_3\Uniform Server\diskw\www\.htaccess ... B)

# This file provides security to the server limiting access to the localhost only.
# Comment to deactivate.

#Order Deny,Allow
#Deny from all
#Allow from 127.0.0.1

# To allow execution of cgi scripts in this directory uncomment next two lines.

#AddHandler cgi-script .pl .cgi
#Options +ExecCGI

# To unlock your server, comment the next 4 lines.
# Defaults: Username = admin; Password = userver

#AuthName "Uniform Server - Secure Server Access"
#AuthType Basic
#AuthUserFile /htpasswd/www/.htpasswd
#Require valid-user

Note 1: If you want to password protect your web space un-comment the last four lines in .htaccess.

Note 2: If you want to run cgi scripts from your web space un-comment (AddHandler cgi-script .pl .cgi and Options +ExecCGI.)

3) Change the root password for MySQL

If you never run MySQL, then online-security is not an issue and you can ignore this section. However, if you do or plan to run MySQL on-line you must secure the root user it only takes a few seconds.

Changing MySQL root password is a two-part process. You must first change the root user password in the MySQL database and then change its corresponding password file.

How to change the database root password:

  • From apanel click on Run MySQL (starts the server)
  • From apanel click on phpMyAdmin
  1. In phpMyAdmin click on Privileges (third link from bottom)
  2. To the right of user root click on Edit Privileges
  3. Scroll down to menu Change Password
  4. Click the radio button to the left of Password
  5. In the password window enter your new password
  6. Below this Re-type your new password
  7. Click on Go (That completes the first step)

How to change the MySQL file root password:

Using windows explorer navigate to the file named mysql_password

Full path shown below:

??/Uniform Server/diskw/home/admin/www/mysql_password

OR from drive W:

W:/home/admin/www/mysql_password

Edit this file in a text editor delete the old password and add your new one.

4) Disable MOD DAV

If you do not know what mod_dav is the chances are that you will not need it. I highly recommend that you disable it. Open the file httpd.conf located

UniServer3_3\Uniform Server\diskw\usr\local\apache2\conf\httpd.conf

Search for the line LoadModule dav_module modules/mod_dav.so and disable it by adding a comment symbol # so the line looks like this:

#LoadModule dav_module modules/mod_dav.so

For the changes to take place save the file and and restart the server.

No Domain name:

No domain name well you are not alone. What is a domain name and why do you need one. Well if you are asking these questions then the next page is for you. If you already know the answers, you may still find something new!.

Testing:

You have tested your web pages using local host now is a good time to test them on line. Shame you do not have a domain name to use! Who needs a domain name anyway you know your IP address just type that into a browser and check your pages are on line.

It is easy to discover what your current IP address is. Left click on the Internet connection icon (bottom right) in the pop up select details tab look for client IP address that’s the one you want.

Alternatively use this site http://www.dnsstuff.com/ your IP address is displayed top right.

Type the IP address into a browser window for example http://82.141.4.59 check your pages job done.

(Action: Added router section)

Where to next

Get a free domain or us your own!

 Domain Name (DNS) 

image top

• UniCenter Site Content Copyright © 2006-2007  Mike Gleaves  All Rights Reserved 30-3-2007 •

Copyright & Links

Copyright 2002-2007 The Uniform Server Development Team All rights reserved.

The Uniform Server: Home | Forum | Wiki | Blog