Fatih ŞİMŞEK hefese

## web.config.markdown

      
              1 file
            
          
              0 forks
            
          
              0 comments
            
          
              0 stars
            
          
                hefese
                / web.config.markdown
            
            
              Created
              March 19, 2019 14:50
                — forked from marcbarry/machine.config.markdown
            
              
                Security hardening pointers for web.config
              
          
    Security hardening web.config

For a complete template see this Gist
Disable tracing

<system.web>
  <trace enabled="false" />

  
## get-ip-address-optimized.php
<?php
function get_ip_address() {
    $ip_keys = array('HTTP_CLIENT_IP', 'HTTP_X_FORWARDED_FOR', 'HTTP_X_FORWARDED', 'HTTP_X_CLUSTER_CLIENT_IP', 'HTTP_FORWARDED_FOR', 'HTTP_FORWARDED', 'REMOTE_ADDR');
    foreach ($ip_keys as $key) {
        if (array_key_exists($key, $_SERVER) === true) {
            foreach (explode(',', $_SERVER[$key]) as $ip) {
                // trim for safety measures
                $ip = trim($ip);
                // attempt to validate IP
                if (validate_ip($ip)) {
	<?php
	function get_ip_address() {
	$ip_keys = array('HTTP_CLIENT_IP', 'HTTP_X_FORWARDED_FOR', 'HTTP_X_FORWARDED', 'HTTP_X_CLUSTER_CLIENT_IP', 'HTTP_FORWARDED_FOR', 'HTTP_FORWARDED', 'REMOTE_ADDR');
	foreach ($ip_keys as $key) {
	if (array_key_exists($key, $_SERVER) === true) {
	foreach (explode(',', $_SERVER[$key]) as $ip) {
	// trim for safety measures
	$ip = trim($ip);
	// attempt to validate IP
	if (validate_ip($ip)) {