Practical web security

on YouTube ↗08m

" summary

Practical, concrete fixes: run WP scanners and OWASP top 10 checks, grade SSL with SSL Labs, and enforce site‑wide SSL; deploy mod_security as a Web Application Firewall and use fail2ban to block brute‑force IPs; migrate customers off reseller hosting to platform specialists and negotiate a CloudFlare partnership that absorbs DDoS traffic and yields free features; result is a DDoS mitigated in under 30 minutes, attacks unnoticed by customers, and measurable SEO and performance gains from blocking bad bots and universal SSL.

AI-written summary · about

" chapters (8)

1. 0:00Start
2. 1:58So how did we stop it?
3. 3:26Turning to Hosting
4. 3:39Web Application Firewall
5. 4:11The First Layer
6. 4:23Brute Force Protection
7. 4:42Use Specialist Hosting
8. 5:14Make Tough Friends

" related talks

• 59mPractical Security for Web ApplicationsChris Holland · NDC Porto 2019
• 34mSecure WordPress Without Coding SkillsFrancesca Marano · WordCamp Singapore 2019
• 52mPractical Security in Web ApplicationsChris Holland · International PHP Conference Spring 2019
• 29mGraphQL Security Best Practices and HardeningAndrew Konstantinov · GraphQL Summit 2023
• 59mProactively defending your businessJim Manico, Cassio Goldschmidt · AppSec California 2015
• 27mSecuring your WordPress sitesEhtisham Siddiqui · WordCamp Singapore 2017
• 40mWebsite security 101Per Thorsheim · QA Fest 2016
• 13mA Positive Security TalkMartin Londal · NDC Oslo 2025