Search Results

Follow the steps below to remediate this finding on Apache webserver. In apache2.conf or httpd.conf, set:ServerTokens Prod ServerSignature Off ServerTokens Prod reduces the Server header to just "Apache" without version details.Reload Apache:sudo systemctl rel...

Follow the steps below to remediate this finding on Plesk. Log in to the Plesk control panel.Navigate to Domains > your domain > Apache & nginx Settings.Under "Additional nginx directives", add:server_tokens off;Under "Additional Apache directives", add:Server...

Follow the steps below to remediate this finding on Windows. Enable SMB signing via Group Policy to require it on all connections.Open Group Policy Management (gpmc.msc).Navigate to Computer Configuration > Windows Settings > Security Settings > Local Policies...

Follow the steps below to remediate this finding on Linux (Debian/Ubuntu). For Samba servers, edit /etc/samba/smb.conf and add to the [global] section:server signing = mandatory client signing = mandatoryRestart Samba:sudo systemctl restart smbd nmbd

Follow the steps below to remediate this finding on Linux (RHEL/CentOS/AlmaLinux). For Samba servers, edit /etc/samba/smb.conf and add to the [global] section:server signing = mandatory client signing = mandatoryRestart Samba:sudo systemctl restart smb nmb

Follow the steps below to remediate this finding on Generic / Developer guidance. SQL injection occurs when untrusted input is concatenated into SQL queries without proper parameterisation.Remediation:Always use parameterised queries / prepared statements:PDO ...

Follow the steps below to remediate this finding on WordPress. Always use $wpdb->prepare() for custom queries:$results = $wpdb->get_results( $wpdb->prepare('SELECT * FROM wp_posts WHERE ID = %d', $postId) );Use the WordPress query API (WP_Query, get_posts()) i...

Follow the steps below to remediate this finding on Joomla. Use the Joomla Database API to build parameterised queries:$db = JFactory::getDbo(); $query = $db->getQuery(true) ->select('*') ->from($db->quoteName('users')) ->where($db->quoteName('id') . ' = ' . $...

Follow the steps below to remediate this finding on Drupal. Use Drupal's database abstraction layer for all queries:$results = \Drupal::database()->select('users', 'u') ->fields('u') ->condition('uid', $uid, '=') ->execute() ->fetchAll();For complex queries, u...