{"id":84184,"date":"2020-06-05T19:42:31","date_gmt":"2020-06-05T17:42:31","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/smertnye-grehi-bezopasnosti-sajta-chto-my-uznali-iz-statistiki-skanera-uyazvimostej-za-god"},"modified":"2020-06-05T19:42:31","modified_gmt":"2020-06-05T17:42:31","slug":"smertnye-grehi-bezopasnosti-sajta-chto-my-uznali-iz-statistiki-skanera-uyazvimostej-za-god","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/smertnye-grehi-bezopasnosti-sajta-chto-my-uznali-iz-statistiki-skanera-uyazvimostej-za-god","title":{"rendered":"Gat e vdekjeve p\u00ebr sigurin\u00eb e faqes: \u00e7far\u00eb kemi m\u00ebsuar nga statistika e skanuesve t\u00eb dob\u00ebsive t\u00eb vitit","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Af\u00ebrsisht nj\u00eb vit m\u00eb par\u00eb, ne n\u00eb DataLine lansuam sh\u00ebrbimin<\/a><\/noindex> p\u00ebr k\u00ebrkimin dhe analizimin e dob\u00ebsive n\u00eb aplikacionet IT. Baza e sh\u00ebrbimit \u00ebsht\u00eb zgjidhja cloud Qualys, p\u00ebr pun\u00ebn e s\u00eb cil\u00ebs ne kemi folur<\/a><\/noindex>. N\u00eb vitin e kaluar t\u00eb pun\u00ebs me zgjidhjen, kemi kryer 291 skanime p\u00ebr faqe t\u00eb ndryshme dhe kemi grumbulluar statistika mbi dob\u00ebsit\u00eb e zakonshme n\u00eb aplikacionet web.\u00a0<\/p>\n

N\u00eb artikullin m\u00eb posht\u00eb do t\u00eb tregoj se cilat vrima n\u00eb sigurin\u00eb e faqeve fshihen pas niveleve t\u00eb ndryshme t\u00eb rrezikshm\u00ebris\u00eb. Le t\u00eb shohim cilat dob\u00ebsi skaneri i gjente ve\u00e7an\u00ebrisht shpesh, pse ato mund t\u00eb ndodhin dhe si t\u00eb mbrohemi.\u00a0<\/p>\n

\"Gat
\n<\/a><\/noindex>
\nT\u00eb gjitha dob\u00ebsit\u00eb e aplikacioneve web Qualys i ndan n\u00eb tri nivele rrezikshm\u00ebrie: t\u00eb ul\u00ebt, t\u00eb mes\u00ebm dhe t\u00eb lart\u00eb. N\u00ebse shikojm\u00eb shp\u00ebrndarjen sipas \"seriozitetit\", duket se gjith\u00e7ka nuk \u00ebsht\u00eb aq keq. Ka pak dob\u00ebsi me nivel t\u00eb lart\u00eb rrezikshm\u00ebrie, kryesisht t\u00eb gjitha jan\u00eb jo kritike:\u00a0<\/p>\n

\"Gat
\n
\nPor jo kritike \u2013 nuk do t\u00eb thot\u00eb pa rrezik. Ato gjithashtu mund t\u00eb shkaktojn\u00eb d\u00ebme t\u00eb r\u00ebnda.\u00a0<\/p>\n

Top \"dob\u00ebsive jo kritike\"<\/h2>\n

<\/p>\n

    \n
  1. Dob\u00ebsi t\u00eb lidhura me p\u00ebrmbajtje t\u00eb p\u00ebrzier.<\/b>\n

    Standardi i siguris\u00eb s\u00eb faqeve \u00ebsht\u00eb transmetimi i t\u00eb dh\u00ebnave midis klientit dhe serverit sipas protokollit HTTPS, i cili mb\u00ebshtet enkripcioni dhe mbron informacionin nga kapja.\u00a0<\/p>\n

    Disa faqe p\u00ebrdorin p\u00ebrmbajtje t\u00eb p\u00ebrzier<\/i>: transmetojn\u00eb nj\u00eb pjes\u00eb t\u00eb t\u00eb dh\u00ebnave p\u00ebrmes protokollit t\u00eb pasigurt HTTP. Shpesh k\u00ebshtu transmetohen p\u00ebrmbajtje pasive<\/i> \u2013 informacioni q\u00eb ndikon vet\u00ebm n\u00eb shfaqjen e faqes: imazhe, stilset css. Por ndonj\u00ebher\u00eb k\u00ebshtu transmetohet edhe p\u00ebrmbajtje aktive<\/i>: skriptet q\u00eb menaxhojn\u00eb sjelljen e faqes. N\u00eb k\u00ebt\u00eb rast, me an\u00eb t\u00eb nj\u00eb programi t\u00eb ve\u00e7ant\u00eb mund t\u00eb analizosh informacionin q\u00eb vjen nga serveri me p\u00ebrmbajtje aktive, t\u00eb modifikosh p\u00ebrgjigjet n\u00eb m\u00ebnyr\u00eb t\u00eb menj\u00ebhershme dhe t\u00eb b\u00ebsh q\u00eb makina t\u00eb veproj\u00eb ndryshe nga sa \u00ebsht\u00eb menduar nga krijuesit e saj.\u00a0<\/p>\n

    Shfletuesit e versioneve t\u00eb reja paralajm\u00ebrojn\u00eb p\u00ebrdoruesit se faqet me p\u00ebrmbajtje t\u00eb p\u00ebrzier nuk jan\u00eb t\u00eb sigurta dhe bllokojn\u00eb p\u00ebrmbajtjen. Zhvilluesit e faqeve gjithashtu marrin paralajm\u00ebrime nga shfletuesi n\u00eb konsol\u00eb. P\u00ebr shembull, k\u00ebshtu duket n\u00eb Firefox<\/a><\/noindex>:\u00a0<\/p>\n

    \"Gat
    \n
    \n\u00c7far\u00eb rreziku ka<\/b>: Kibernetik\u00ebt p\u00ebrdorin protokollin e pap\u00ebrmir\u00ebsuar p\u00ebr t\u00eb kapur informacionin e p\u00ebrdoruesve, p\u00ebr t\u00eb z\u00ebvend\u00ebsuar skriptet dhe p\u00ebr t\u00eb d\u00ebrguar k\u00ebrkesa n\u00eb faqen e internetit n\u00eb emrin e tij. Edhe n\u00ebse vizitori i faqes nuk ka futur t\u00eb dh\u00ebna, kjo nuk e mbron at\u00eb nga peshkimi <\/i>\u2013 nxjerrja e informacionit t\u00eb ndjesh\u00ebm n\u00eb m\u00ebnyr\u00eb mashtruese. P\u00ebr shembull, me an\u00eb t\u00eb nj\u00eb skripti mund t\u00eb ridrejtohet p\u00ebrdoruesi n\u00eb nj\u00eb faqe t\u00eb pasigurt, e cila maskohet si ajo e njohur p\u00ebr p\u00ebrdoruesin. N\u00eb raste t\u00eb caktuara, faqja e keqe duket madje m\u00eb mir\u00eb se origjinali, dhe p\u00ebrdoruesi mund ta plot\u00ebsoj\u00eb form\u00ebn dhe t'i d\u00ebrgoj\u00eb t\u00eb dh\u00ebnat e ndjeshme.\u00a0<\/p>\n

    \u00c7far\u00eb duhet t\u00eb mbaj\u00eb mend zhvilluesi i uebit<\/b>: Edhe n\u00ebse administratori i faqes ka instaluar dhe konfigurua certifikat\u00ebn SSL\/TLS, nj\u00eb dob\u00ebsi mund t\u00eb ndodh\u00eb p\u00ebr shkak t\u00eb faktor\u00ebve njer\u00ebzor\u00eb. P\u00ebr shembull, n\u00ebse n\u00eb ndonj\u00eb nga faqet \u00ebsht\u00eb vendosur nj\u00eb lidhje absolute me http, e jo n\u00eb m\u00ebnyr\u00eb relative, dhe p\u00ebr m\u00eb tep\u00ebr nuk jan\u00eb konfiguruar ridrejtime nga http n\u00eb https.\u00a0<\/p>\n

    P\u00ebr t\u00eb zbuluar p\u00ebrmbajtjen e p\u00ebrzier n\u00eb faqen e internetit, mund t\u00eb p\u00ebrdorni shfletuesin: k\u00ebrkoni n\u00eb kodin burimor t\u00eb faqes, lexoni njoftimet n\u00eb konsol\u00ebn e zhvilluesit. Sidoqoft\u00eb, zhvilluesit do t'u k\u00ebrkohet t\u00eb kalojn\u00eb gjat\u00eb n\u00eb kod. Procesin mund ta p\u00ebrshpejtoni me mjete automatike analize, p\u00ebr shembull: Kontrolli SSL<\/a><\/noindex>, softueri i lir\u00eb Lighthouse ose softueri me pages\u00eb Screaming Frog SEO Spider.<\/p>\n

    Gjithashtu, nj\u00eb dob\u00ebsi mund t\u00eb ndodh\u00eb p\u00ebr shkak t\u00eb problemeve me kodin e vjet\u00ebr \u2013 kodin q\u00eb \u00ebsht\u00eb trash\u00ebguar. P\u00ebr shembull, n\u00ebse disa faqe gjenerohen sipas nj\u00eb model t\u00eb vjet\u00ebr, ku nuk merret parasysh kalimi i faqeve n\u00eb https.\u00a0\u00a0\u00a0\u00a0\n<\/li>\n

  2. Cookie pa flamujt \u2018HTTPOnly\u2019 dhe \u2018secure\u2019.<\/b>\n

    Atributi \u2018HTTPOnly\u2019 mbron skedar\u00ebt e cookie nga p\u00ebrpunimi nga skriptet q\u00eb kibernetik\u00ebt i p\u00ebrdorin p\u00ebr t\u00eb vjedhur t\u00eb dh\u00ebnat e p\u00ebrdoruesve. Flamuri \u2018secure\u2019 nuk lejon transferimin e cookie-ve n\u00eb m\u00ebnyr\u00eb t\u00eb hapur. Shk\u00ebmbimi i t\u00eb dh\u00ebnave do t\u00eb lejohet vet\u00ebm n\u00ebse p\u00ebr d\u00ebrgimin e cookie-ve p\u00ebrdoret protokolli i sigurt HTTPS.\u00a0<\/p>\n

    T\u00eb dy atributet duhet t\u00eb p\u00ebrshkruhen n\u00eb pron\u00ebsit\u00eb e cookie-ve:<\/p>\n

    Set-Cookie: Secure; HttpOnly<\/code><\/pre>\n
    \n\u00c7far\u00eb rreziku ka<\/b>: N\u00ebse zhvilluesi i faqes nuk ka specifikuar k\u00ebto atribute, kibernetiku mund t\u00eb kap\u00eb informacionin e p\u00ebrdoruesit nga cookie dhe ta p\u00ebrdor\u00eb at\u00eb. N\u00ebse cookie-t p\u00ebrdoren p\u00ebr autentifikim dhe autorizim, ai do t\u00eb jet\u00eb n\u00eb gjendje t\u00eb vjedh\u00eb seanc\u00ebn e p\u00ebrdoruesit dhe t\u00eb kryej\u00eb veprime n\u00eb faqen n\u00eb emrin e tij.\u00a0<\/p>\n
    \u00c7far\u00eb duhet t\u00eb mbaj\u00eb mend zhvilluesi i uebit<\/b>: N\u00eb rregull, n\u00eb framework-\u00ebt popullor\u00eb, k\u00ebto atribute vendosen automatikisht. Por t\u00eb kontrolloni konfigurimin e serverit web dhe t\u00eb vendosni flamurin: Set-Cookie HttpOnly; Secure. <\/p>\n
    N\u00eb k\u00ebt\u00eb rast, atributi \u00abHTTPOnly\u00bb do t'i b\u00ebj\u00eb cookies t\u00eb paduksh\u00ebm dhe p\u00ebr JavaScript-in tuaj.\u00a0\u00a0\n<\/li>\n
  3. P\u00ebrgjigjet e D\u00ebmtueshme Baze t\u00eb Rrug\u00ebs.<\/b>\n
    Skeneri raporton p\u00ebr nj\u00eb vulnerabilitet t\u00eb till\u00eb n\u00ebse gjen nj\u00eb skedar ose direktor t\u00eb aksesuesh\u00ebm publik t\u00eb faqes me informacione potencialisht t\u00eb ndjeshme. P\u00ebr shembull, zb discoversf ekton skedar\u00eb t\u00eb ve\u00e7ant\u00eb me konfigurimin e sistemit ose qasje n\u00eb sistemin e skedar\u00ebve n\u00eb t\u00ebr\u00ebsi. Kjo situat\u00eb \u00ebsht\u00eb e mundur n\u00ebse faqa e internetit ka caktuar gabimisht t\u00eb drejtat e aksesit.<\/p>\n
    \u00c7far\u00eb rreziku ka<\/b>: N\u00ebse sistemi i skedar\u00ebve \u00abvjen jasht\u00eb\u00bb, nj\u00eb sulmues mund t\u00eb dep\u00ebrtoj\u00eb n\u00eb nd\u00ebrfaqen e sistemit operativ dhe t\u00eb p\u00ebrpiqet t\u00eb gjej\u00eb dosje me fjal\u00ebkalime, n\u00ebse ato ruhen n\u00eb form\u00eb t\u00eb hapur (mos e b\u00ebni at\u00eb!). Ose mund t\u00eb vjedh\u00eb hash-et e fjal\u00ebkalimeve dhe t\u00eb provojn\u00eb t'i gjejn\u00eb fjal\u00ebkalimin p\u00ebrmes mbushjes, si dhe t\u00eb p\u00ebrpiqet t\u00eb rris\u00eb privilegjet n\u00eb sistem dhe t\u00eb avancoj\u00eb brenda infrastruktur\u00ebs.\u00a0\u00a0<\/p>\n
    \u00c7far\u00eb duhet t\u00eb mbaj\u00eb mend zhvilluesi i uebit<\/b>: Mos harroni rreth t\u00eb drejtave t\u00eb aksesit dhe konfiguroni platform\u00ebn, serverin web, aplikacionin web, n\u00eb m\u00ebnyr\u00eb q\u00eb t\u00eb mos mund t\u00eb \u00abshkoni\u00bb jasht\u00eb direktoris\u00eb web.\n<\/li>\n
  4. Format p\u00ebr futjen e t\u00eb dh\u00ebnave t\u00eb ndjeshme me funksionin e plot\u00ebsimit automatik t\u00eb aktivizuar.<\/b>\n
    N\u00ebse p\u00ebrdoruesi shpesh ploteson forma n\u00eb faqet e internetit, shfletuesi i tij ruan k\u00ebto informata me an\u00eb t\u00eb funksionit t\u00eb plot\u00ebsimit automatik.\u00a0<\/p>\n
    Format n\u00eb faqet e internetit mund t\u00eb p\u00ebrfshijn\u00eb fusha me informacione t\u00eb ndjeshme, p\u00ebr shembull, fjal\u00ebkalime ose numra kartelash krediti. P\u00ebr k\u00ebto fusha, duhet t\u00eb \u00e7aktivizoni funksionin e plot\u00ebsimit automatik n\u00eb vet\u00eb faqen.\u00a0<\/p>\n
    \u00c7far\u00eb rreziku ka<\/b>: N\u00ebse shfletuesi i p\u00ebrdoruesit ruan informata t\u00eb ndjeshme, nj\u00eb sulmues mund ta kap\u00eb at\u00eb m\u00eb von\u00eb, p\u00ebr shembull, me an\u00eb t\u00eb phishing-ut. N\u00eb thelb, zhvilluesi web, i cili harroi k\u00ebt\u00eb nuanc\u00eb, v\u00eb n\u00eb rrezik p\u00ebrdoruesit e tij.\u00a0<\/p>\n
    \u00c7far\u00eb duhet t\u00eb mbaj\u00eb mend zhvilluesi i uebit<\/b>: N\u00eb k\u00ebt\u00eb rast kemi nj\u00eb konflikt klasik: komoditeti vs siguria. N\u00ebse zhvilluesi web mendon p\u00ebr komfortin e p\u00ebrdoruesit, ai mund t\u00eb zgjedh\u00eb me vet\u00ebdije plot\u00ebsimin automatik. P\u00ebr shembull, n\u00ebse \u00ebsht\u00eb e r\u00ebnd\u00ebsishme t\u00eb respektohet Udh\u00ebzimet p\u00ebr Aksesi t\u00eb P\u00ebrmbajtjes Web<\/a><\/noindex> \u2013 rekomandimet p\u00ebr aksesin n\u00eb p\u00ebrmbajtje p\u00ebr p\u00ebrdoruesit me aft\u00ebsi t\u00eb kufizuara.\u00a0<\/p>\n
    P\u00ebr shumic\u00ebn e shfletuesve, mund t\u00eb \u00e7aktivizoni plot\u00ebsimin automatik me atributin autocompete=\"off\", p\u00ebr shembull:<\/p>\n
    \u00a0<body>\n    <form action="\/sq\/form\/submit\/" method="get" autocomplete="off" data-trp-original-action="\/form\/submit">\n      <div>\n        <input type="text" placeholder="Emri">\n      <\/div>\n      <div>\n        <input type="text" id="lname" placeholder="Mbiemri" autocomplete="on">\n      <\/div>\n      <div>\n        <input type="number" placeholder="Numri i kartës së kreditit">\n      <\/div>\n      <input type="submit">\n    <input type="hidden" name="trp-form-language" value="sq"\/><\/form>\n  <\/body><\/code><\/pre>\n
    \nPor p\u00ebr Chrome kjo nuk do t\u00eb funksionoj\u00eb. Kjo anashkalohet me an\u00eb t\u00eb JavaScript, nj\u00eb variant i recet\u00ebs mund t\u00eb gjendet. k\u00ebtu<\/a><\/noindex>.\u00a0\n<\/li>\n
  5. N\u00eb kodin e faqes s\u00eb internetit nuk \u00ebsht\u00eb caktuar titulli X-Frame-Options.\u00a0<\/b>\n
    Ky titull ndikon n\u00eb etiketat frame, iframe, embed ose object. Me t\u00eb mund t\u00eb ndalohet plot\u00ebsisht p\u00ebrfshirja e faqes suaj n\u00eb nj\u00eb frame. P\u00ebr k\u00ebt\u00eb, duhet t\u00eb caktohet vlera X-Frame-Options: deny. Ose mund t\u00eb caktohet X-Frame-Options: sameorigin, at\u00ebher\u00eb p\u00ebrfshirja n\u00eb iframe do t\u00eb jet\u00eb e disponueshme vet\u00ebm n\u00eb domenin tuaj.<\/p>\n
    \u00c7far\u00eb rreziku ka<\/b>: Mungesa e nj\u00eb titulli t\u00eb till\u00eb mund t\u00eb p\u00ebrdoret n\u00eb faqe t\u00eb d\u00ebmshme p\u00ebr clickjacking<\/i>. P\u00ebr nj\u00eb sulm t\u00eb till\u00eb, sulmuesi krijon nj\u00eb frame transparent mbi butonat dhe e mashtron p\u00ebrdoruesin. P\u00ebr shembull: mashtruesit vendosin n\u00eb frame n\u00eb faqen e d\u00ebmshme t\u00eb rrjeteve sociale. P\u00ebrdoruesi mendon se po klikon mbi nj\u00eb buton n\u00eb k\u00ebt\u00eb faq\u00eb. N\u00eb vend t\u00eb k\u00ebsaj, kliku mbulon dhe d\u00ebrgon nj\u00eb k\u00ebrkes\u00eb t\u00eb p\u00ebrdoruesit n\u00eb rrjetin social, ku ka nj\u00eb sesion aktiv. N\u00eb k\u00ebt\u00eb m\u00ebnyr\u00eb, sulmuesit shp\u00ebrndajn\u00eb spam n\u00eb em\u00ebr t\u00eb p\u00ebrdoruesit ose rrisin ndjek\u00ebsit dhe like-t.\u00a0<\/p>\n
    N\u00ebse nuk e ndaloni nj\u00eb mund\u00ebsi t\u00eb till\u00eb, sulmuesi mund t\u00eb vendos\u00eb butonin e aplikacionit tuaj n\u00eb nj\u00eb faqe t\u00eb d\u00ebmshme. Ai mund t\u00eb ket\u00eb interes n\u00eb programin tuaj referral ose te p\u00ebrdoruesit tuaj.\u00a0\u00a0<\/p>\n
    \u00c7far\u00eb duhet t\u00eb mbaj\u00eb mend zhvilluesi i uebit<\/b>: Nj\u00eb vulnerabilitet mund t\u00eb shfaqet n\u00ebse X-Frame-Options me nj\u00eb vler\u00eb konfliktuese \u00ebsht\u00eb caktuar n\u00eb serverin web ose balancuesin e ngarkes\u00ebs. N\u00eb k\u00ebt\u00eb rast, serveri dhe balancuesi i ngarkes\u00ebs do ta rishkruajn\u00eb thjesht titullin, pasi kan\u00eb p\u00ebrpar\u00ebsi m\u00eb t\u00eb lart\u00eb n\u00eb krahasim me kodin e pjes\u00ebs s\u00eb prapme.\u00a0\u00a0<\/p>\n
    Vlerat deny dhe sameorigin t\u00eb titullit X-Frame-Options do t\u00eb pengojn\u00eb funksionimin e webvizorit t\u00eb Yandex. P\u00ebr t\u00eb lejuar p\u00ebrdorimin e iframe p\u00ebr webvizorin, duhet t\u00eb shkruani nj\u00eb rregull t\u00eb ve\u00e7ant\u00eb n\u00eb cil\u00ebsimet. P\u00ebr shembull, p\u00ebr nginx mund t\u00eb konfigurohet k\u00ebshtu:<\/p>\n
    http{\n...\n\u00a0map $http_referer $frame_options {\n\u00a0"~webvisor.com" "ALLOW-FROM http:\/\/webvisor.com";\n\u00a0default "SAMEORIGIN";\n\u00a0}\n\u00a0add_header X-Frame-Options $frame_options;\n...\n}\n\n<\/code><\/pre>\n
    \n<\/li>\n
  6. Vulnerabilitetet PRSSI (Importimi i stilit t\u00eb rrug\u00ebs relative).\u00a0\u00a0<\/b>\n
    \u042d\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u0442\u0438\u043b\u044f\u0445 \u0441\u0430\u0439\u0442\u0430. \u041e\u043d\u0430 \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442, \u0435\u0441\u043b\u0438 \u0434\u043b\u044f \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u043a \u0444\u0430\u0439\u043b\u0430\u043c \u0441\u0442\u0438\u043b\u0435\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0441\u0441\u044b\u043b\u043a\u0438 \u0432\u0438\u0434\u0430 href="\/somefolder\/styles.css\/". \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u044d\u0442\u0438\u043c, \u0435\u0441\u043b\u0438 \u043d\u0430\u0439\u0434\u0435\u0442 \u0441\u043f\u043e\u0441\u043e\u0431 \u043f\u0435\u0440\u0435\u0432\u0435\u0441\u0442\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u043d\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0443\u044e \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0443. \u0421\u0442\u0440\u0430\u043d\u0438\u0446\u0430 \u043f\u043e\u0434\u0441\u0442\u0430\u0432\u0438\u0442 \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u0441\u0441\u044b\u043b\u043a\u0443 \u0432 \u0441\u0432\u043e\u0439 url \u0438 \u0438\u043c\u0438\u0442\u0438\u0440\u0443\u0435\u0442 \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u0435 \u043a \u0441\u0442\u0438\u043b\u044f\u043c. \u041f\u043e\u043b\u0443\u0447\u0438\u0442\u0441\u044f \u0437\u0430\u043f\u0440\u043e\u0441 \u043d\u0430\u043f\u043e\u0434\u043e\u0431\u0438\u0435 badsite.ru\/…\/somefolder\/styles.css\/, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0434 \u0432\u0438\u0434\u043e\u043c \u0441\u0442\u0438\u043b\u044f \u043c\u043e\u0436\u0435\u0442 \u0441\u043e\u0432\u0435\u0440\u0448\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f.\u00a0<\/p>\n
    \u00c7far\u00eb rreziku ka<\/b>: Nj\u00eb mashtrues mund t\u00eb p\u00ebrfitoj\u00eb nga kjo dob\u00ebsi n\u00ebse gjen nj\u00eb tjet\u00ebr vrim\u00eb n\u00eb siguri. Si rezultat, k\u00ebshtu mund t\u00eb vidhen t\u00eb dh\u00ebnat e p\u00ebrdoruesit nga cookies ose token\u00ebt.<\/p>\n
    \u00c7far\u00eb duhet t\u00eb mbaj\u00eb mend zhvilluesi i uebit<\/b>: Shtoni titullin X-Content-Type-Options: nosniff. N\u00eb k\u00ebt\u00eb rast, shfletuesi do t\u00eb kontrolloj\u00eb llojin e p\u00ebrmbajtjes p\u00ebr stilet. N\u00ebse lloji \u00ebsht\u00eb ndryshe nga text\/css, shfletuesi do ta bllokoj\u00eb k\u00ebrkes\u00ebn.\n<\/li>\n<\/ol>\n
    <\/p>\n
    Dob\u00ebsit\u00eb kritike<\/h2>\n
    <\/p>\n
      \n
    1. Faqja me fush\u00ebn p\u00ebr fjal\u00ebkalim d\u00ebrgohet nga serveri p\u00ebrmes nj\u00eb kanali t\u00eb pa sigurt (HTML form containing password field(s) is served over HTTP).<\/b>\n
      P\u00ebrgjigjja nga serveri p\u00ebr nj\u00eb kanal t\u00eb pa kriptuar \u00ebsht\u00eb e prirur ndaj sulmeve t\u00eb tipit \u00abMan in the middle\u00bb. Nj\u00eb sulmues mund t\u00eb kap\u00eb trafikun dhe t\u00eb nd\u00ebrhyj\u00eb nd\u00ebrmjet klientit dhe serverit, kur faqa shkon nga serveri te klienti.\u00a0<\/p>\n
      \u00c7far\u00eb rreziku ka<\/b>: Nj\u00eb mashtrues mund t\u00eb z\u00ebvend\u00ebsoj\u00eb faqen dhe t'i d\u00ebrgoj\u00eb p\u00ebrdoruesit nj\u00eb form\u00eb p\u00ebr t\u00eb dh\u00ebnat e ndjeshme, t\u00eb cilat do t\u00eb shkojn\u00eb n\u00eb serverin e sulmuesit.\u00a0<\/p>\n
      \u00c7far\u00eb duhet t\u00eb mbaj\u00eb mend zhvilluesi i uebit<\/b>: Disa vende n\u00eb vend t\u00eb fjal\u00ebkalimit d\u00ebrgojn\u00eb p\u00ebrdoruesve nj\u00eb kod t\u00eb vet\u00ebm p\u00ebrmes emailit\/telefonit. N\u00eb k\u00ebt\u00eb rast, dob\u00ebsia nuk \u00ebsht\u00eb aq kritike, por mekanizmi do ta komplikohet jet\u00ebn p\u00ebrdoruesve.\n<\/li>\n
    2. D\u00ebrgimi i formularit me em\u00ebr p\u00ebrdoruesi dhe fjal\u00ebkalim p\u00ebrmes nj\u00eb kanali t\u00eb pa sigurt (Login Form Is Not Submitted Via HTTPS).<\/b>\n
      N\u00eb k\u00ebt\u00eb rast, nga p\u00ebrdoruesi n\u00eb server d\u00ebrgohet nj\u00eb formular me em\u00ebr p\u00ebrdoruesi dhe fjal\u00ebkalim p\u00ebrmes nj\u00eb kanali t\u00eb pa kriptuar.<\/p>\n
      \u00c7far\u00eb rreziku ka<\/b>: Ndryshe nga rastin e m\u00ebparsh\u00ebm, kjo \u00ebsht\u00eb nj\u00eb dob\u00ebsi kritike. Kapja e t\u00eb dh\u00ebnave t\u00eb ndjeshme \u00ebsht\u00eb m\u00eb e leht\u00eb, pasi as nuk \u00ebsht\u00eb nevoja t\u00eb shkruani kod p\u00ebr t\u00eb.\u00a0\n<\/li>\n
    3. P\u00ebrdorimi i librarive JavaScript me dob\u00ebsi t\u00eb njohura.<\/b>\n
      Gjat\u00eb skanimit, biblioteka m\u00eb e p\u00ebrdorur u b\u00eb jQuery me nj\u00eb gam\u00eb t\u00eb gjer\u00eb versionesh. N\u00eb secil\u00ebn version ka t\u00eb pakt\u00ebn nj\u00eb, ndonj\u00ebher\u00eb edhe m\u00eb shum\u00eb dob\u00ebsi t\u00eb njohura. Ndikimi mund t\u00eb jet\u00eb nga m\u00eb t\u00eb ndryshmet \u2013 varet nga natyra e dob\u00ebsis\u00eb.<\/p>\n
      \u00c7far\u00eb rreziku ka<\/b>: P\u00ebr dob\u00ebsi t\u00eb njohura ka eksploite, p\u00ebr shembull k\u00ebto:<\/p>\n
      \"Gat
      \n
      \n\u00c7far\u00eb duhet t\u00eb mbaj\u00eb mend zhvilluesi i uebit<\/b>: Kthehuni rregullisht n\u00eb cik\u00ebl: k\u00ebrkimi i dob\u00ebsive t\u00eb njohura \u2013 eliminimi \u2013 kontrolli. N\u00ebse po p\u00ebrdorni libra t\u00eb vjetruar me vet\u00ebdije, p\u00ebr shembull p\u00ebr t\u00eb mb\u00ebshtetur shfletues t\u00eb vjet\u00ebr ose p\u00ebr t\u00eb kursyer buxhetin, k\u00ebrkoni mund\u00ebsi p\u00ebr t\u00eb eliminuar dob\u00ebsin\u00eb e njohur.\u00a0\n<\/li>\n
    4. Scripts nd\u00ebr-sajtesh (XSS).\u00a0<\/b>
      \nCross-Site Scripting (XSS), ose skriptet nd\u00ebr-site, jan\u00eb sulme ndaj aplikacioneve n\u00eb ueb, ku p\u00ebr pasoj\u00eb shfaqet malware n\u00eb baz\u00ebn e t\u00eb dh\u00ebnave. N\u00ebse Qualys gjen nj\u00eb dobie, at\u00ebher\u00eb nj\u00eb sulmues potencial mund t\u00eb ket\u00eb introduktuar ose tashm\u00eb ka introduktuar n\u00eb kodin e faqes s\u00eb internetit skriptin e tij js p\u00ebr t\u00eb kryer veprime t\u00eb d\u00ebmshme.<\/p>\n
      XSS t\u00eb Ruajtura (Stored XSS)<\/b> jan\u00eb m\u00eb t\u00eb rrezikshme, pasi skripti introduktohet n\u00eb server dhe ekzekutohet \u00e7do her\u00eb kur hapet faqja e sulmuar n\u00eb shfletues.<\/p>\n
      XSS t\u00eb Reflektuar (Reflected XSS)<\/b> jan\u00eb m\u00eb t\u00eb leht\u00eb p\u00ebr t'u realizuar, pasi skripti keqb\u00ebr\u00ebs mund t\u00eb introduktohet n\u00eb k\u00ebrkes\u00ebn HTTP. Aplikacioni do marr\u00eb k\u00ebrkes\u00ebn HTTP, nuk do ta kontrolloj\u00eb t\u00eb dh\u00ebn\u00ebn, do ta paketoj\u00eb dhe menj\u00ebher\u00eb do ta d\u00ebrgoj\u00eb. N\u00ebse sulmuesi kap trafikun dhe fut skriptin e tipit <\/p>\n
      <script>\/*+\u0447\u0442\u043e+\u0442\u043e+\u043f\u043b\u043e\u0445\u043e\u0435+*\/<\/script> <\/code><\/pre>\n
      \nat\u00ebher\u00eb nj\u00eb k\u00ebrkes\u00eb e d\u00ebmshme do t\u00eb d\u00ebrgohet n\u00eb em\u00ebr t\u00eb klientit.<\/p>\n
      Nj\u00eb shembull i duksh\u00ebm i XSS: js-snifer\u00ebt, t\u00eb cil\u00ebt imitojn\u00eb faqe p\u00ebr futjen e CVC, afatit t\u00eb skadenc\u00ebs s\u00eb kart\u00ebs dhe k\u00ebshtu me radh\u00eb.\u00a0<\/p>\n
      \u00c7far\u00eb duhet t\u00eb mbaj\u00eb mend zhvilluesi i uebit<\/b>: \u0412 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0435 Content-Security-Policy \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0439\u0442\u0435 \u0430\u0442\u0440\u0438\u0431\u0443\u0442 script-src, \u0447\u0442\u043e\u0431\u044b \u0431\u0440\u0430\u0443\u0437\u0435\u0440 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u043b \u0438 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u043b \u0442\u043e\u043b\u044c\u043a\u043e \u043a\u043e\u0434 \u0441 \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u043e\u0433\u043e \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0430. \u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, script-src ‘self’ \u0432\u043d\u043e\u0441\u0438\u0442 \u0432 \u0431\u0435\u043b\u044b\u0439 \u0441\u043f\u0438\u0441\u043e\u043a \u0432\u0441\u0435 \u0441\u043a\u0440\u0438\u043f\u0442\u044b \u0442\u043e\u043b\u044c\u043a\u043e \u0441 \u043d\u0430\u0448\u0435\u0433\u043e \u0441\u0430\u0439\u0442\u0430.\u00a0
      \n\u041d\u0430\u0438\u043b\u0443\u0447\u0448\u0435\u0439 \u043f\u0440\u0430\u043a\u0442\u0438\u043a\u043e\u0439 \u0441\u0447\u0438\u0442\u0430\u0435\u0442\u0441\u044f Inline code: \u0440\u0430\u0437\u0440\u0435\u0448\u0438\u0442\u0435 \u0442\u043e\u043b\u044c\u043a\u043e inline javascript \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f unsafe-inline. \u0422\u0430\u043a\u043e\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u0440\u0430\u0437\u0440\u0435\u0448\u0430\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c inline js\/css, \u043d\u043e \u043d\u0435 \u0437\u0430\u043f\u0440\u0435\u0449\u0430\u0435\u0442 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u0442\u044c js-\u0444\u0430\u0439\u043b\u044b. \u0412 \u043a\u043e\u043c\u0431\u0438\u043d\u0430\u0446\u0438\u0438 \u0441\u043e script-src ‘self’ \u043c\u044b \u0437\u0430\u043f\u0440\u0435\u0449\u0430\u0435\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0432\u043d\u0435\u0448\u043d\u0438\u0435 \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0438.<\/p>\n
      Sigurohuni t\u00eb regjistroni gjith\u00e7ka duke p\u00ebrdorur report-uri dhe shqyrtoni p\u00ebrpjekjet p\u00ebr introduktim n\u00eb faqe.\n<\/li>\n
    5. Injeksionet SQL.<\/b>
      \nDobia tregon mund\u00ebsin\u00eb e introduktimit t\u00eb kodit SQL n\u00eb faqe, i cili drejtohet direkt n\u00eb baz\u00ebn e t\u00eb dh\u00ebnave t\u00eb faqes. Injeksioni SQL \u00ebsht\u00eb i mundsh\u00ebm n\u00ebse t\u00eb dh\u00ebnat nga p\u00ebrdoruesi nuk jan\u00eb t\u00eb shenjuara: nuk kontrollohen p\u00ebr korrekt\u00ebsi dhe p\u00ebrdoren menj\u00ebher\u00eb n\u00eb k\u00ebrkes\u00eb. P\u00ebr shembull, k\u00ebshtu ndodh n\u00ebse forma n\u00eb faqe nuk kontrollon p\u00ebrputhshm\u00ebrin\u00eb e hyrjes me tipin e t\u00eb dh\u00ebnave.\u00a0<\/p>\n
      \u00c7far\u00eb rreziku ka<\/b>: N\u00ebse nj\u00eb sulmues fut nj\u00eb k\u00ebrkes\u00eb SQL n\u00eb nj\u00eb form\u00eb t\u00eb till\u00eb, ai mund t\u00eb shkat\u00ebrroj\u00eb baz\u00ebn e t\u00eb dh\u00ebnave ose t\u00eb nxjerr\u00eb informacion t\u00eb ndjesh\u00ebm.\u00a0<\/p>\n
      \u00c7far\u00eb duhet t\u00eb mbaj\u00eb mend zhvilluesi i uebit<\/b>: Mos i besoni asaj q\u00eb vjen nga shfletuesi. Duhet t\u00eb mbroheni edhe n\u00eb an\u00ebn e klientit, edhe n\u00eb an\u00ebn e serverit.\u00a0<\/p>\n
      N\u00eb an\u00ebn e klientit, shkruani verifikimin e fushave me ndihm\u00ebn e JavaScript.\u00a0<\/p>\n
      Funksionet e nd\u00ebrtuara n\u00eb frameworket e njohura gjithashtu ndihmojn\u00eb n\u00eb ekranuar simbolet e dyshimta n\u00eb server. N\u00eb server, \u00ebsht\u00eb gjithashtu e rekomanduar t\u00eb p\u00ebrdoren k\u00ebrkesat e parametrizuara p\u00ebr bazat e t\u00eb dh\u00ebnave.<\/p>\n
      P\u00ebrcaktoni sakt\u00ebsisht ku ndodh nd\u00ebrveprimi me baz\u00ebn e t\u00eb dh\u00ebnave n\u00eb aplikacionin web.\u00a0<\/p>\n
      Nd\u00ebrveprimi ndodh kur ne marrim ndonj\u00eb informacion: nj\u00eb k\u00ebrkes\u00eb me id (ndryshimi i id), krijimi i nj\u00eb p\u00ebrdoruesi t\u00eb ri, nj\u00eb koment i ri, - regjistrime t\u00eb reja n\u00eb baz\u00eb. K\u00ebtu mund t\u00eb ndodhin sql-injeksione. Edhe n\u00ebse fshijm\u00eb nj\u00eb regjistrim nga baza, mund t\u00eb ndodhi sql-injeksioni.\n<\/li>\n<\/ol>\n
      <\/p>\n
      Rekomandime t\u00eb p\u00ebrgjithshme<\/h2>\n
      \nMos shpikni bi\u00e7iklet\u00ebn \u2013 p\u00ebrdorni frameworke t\u00eb provuara<\/b>. N\u00eb p\u00ebrgjith\u00ebsi, frameworket e njohura jan\u00eb m\u00eb t\u00eb sigurta. P\u00ebr .NET \u2013 ky \u00ebsht\u00eb ASP.NET MVC dhe ASP.NET Core, p\u00ebr Python \u2013 Django ose Flask, p\u00ebr Ruby \u2013 Ruby on Rails, p\u00ebr PHP \u2013 Symfony, Laravel, Yii, p\u00ebr JavaScript \u2013 Node.JS- Express.js, p\u00ebr Java \u2013 Spring MVC.<\/p>\n
      Merrni parasysh azhurnimet e ofruesit dhe azhurnoni rregullisht<\/b>. Do t\u00eb gjejn\u00eb nj\u00eb dob\u00ebsi, pastaj do t\u00eb shkruajn\u00eb nj\u00eb exploit, do ta publikojn\u00eb n\u00eb akses publik, dhe gjith\u00e7ka do t\u00eb p\u00ebrs\u00ebritet p\u00ebrs\u00ebri. Regjistrohuni p\u00ebr azhurnime deri n\u00eb versionet stabile nga ofruesi i softuerit.<\/p>\n
      Kontrolloni t\u00eb drejtat e aksesit<\/b>. Nga ana e serverit, gjithmon\u00eb trajtoni kodin tuaj sikur t\u00eb ishte shkruar nga armiku juaj m\u00eb i urryer, i cili d\u00ebshiron t\u00eb thyej\u00eb faqen tuaj dhe t\u00eb d\u00ebmtoj\u00eb integritetin e t\u00eb dh\u00ebnave tuaja. Sidomos, ndonj\u00ebher\u00eb, kjo v\u00ebrtet ndodh.<\/p>\n
      P\u00ebrdorni klonime, ambiente testimi, dhe pastaj derdhni n\u00eb prodhim<\/b>. Kjo do t\u00eb ndihmoj\u00eb, s\u00eb pari, t\u00eb shmangni gabimet dhe mang\u00ebsit\u00eb n\u00eb ambientin produktiv: ambienti produktiv sjell para, ndalimi i ambientit produktiv \u00ebsht\u00eb kritik. Kur shtoni, korrigjoni ose mbyllni ndonj\u00eb problem, \u00ebsht\u00eb e r\u00ebnd\u00ebsishme t\u00eb b\u00ebni pun\u00ebt n\u00eb nj\u00eb mjedis testimi, pastaj t\u00eb kontrolloni funksionalitetin dhe dob\u00ebsit\u00eb e gjetura, dhe pastaj t\u00eb planifikoni pun\u00ebt me ambientin produktiv.\u00a0<\/p>\n
      Mbroni aplikacionin web me Web Application Firewall<\/a><\/noindex> dhe integro shkresa nga skaneri i dob\u00ebsive<\/b>. P\u00ebr shembull, n\u00eb DataLine si lidhje sh\u00ebrbimesh p\u00ebrdoren Qualys dhe FortiWeb.
      \n
      Burimi:       habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"
      \u041f\u0440\u0438\u043c\u0435\u0440\u043d\u043e \u0433\u043e\u0434 \u043d\u0430\u0437\u0430\u0434 \u043c\u044b \u0432 DataLine \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u0441\u0435\u0440\u0432\u0438\u0441 \u0434\u043b\u044f \u043f\u043e\u0438\u0441\u043a\u0430 \u0438 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0418\u0422-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u0445. \u0412 \u043e\u0441\u043d\u043e\u0432\u0435 \u0441\u0435\u0440\u0432\u0438\u0441\u0430 \u2013 \u043e\u0431\u043b\u0430\u0447\u043d\u043e\u0435 \u0440\u0435\u0448\u0435\u043d\u0438\u0435 Qualys, \u043f\u0440\u043e \u0440\u0430\u0431\u043e\u0442\u0443 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u043c\u044b \u0443\u0436\u0435 \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u044b\u0432\u0430\u043b\u0438. \u0417\u0430 \u0433\u043e\u0434 \u0440\u0430\u0431\u043e\u0442\u044b \u0441 \u0440\u0435\u0448\u0435\u043d\u0438\u0435\u043c \u043c\u044b \u043f\u0440\u043e\u0432\u0435\u043b\u0438 291 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0434\u043b\u044f \u0440\u0430\u0437\u043d\u044b\u0445 \u0441\u0430\u0439\u0442\u043e\u0432 \u0438 \u043d\u0430\u043a\u043e\u043f\u0438\u043b\u0438 \u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0443 \u043f\u043e \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043d\u044b\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c \u0432 \u0432\u0435\u0431-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u0445.\u00a0 \u0412 \u0441\u0442\u0430\u0442\u044c\u0435 \u043d\u0438\u0436\u0435 \u044f \u043f\u043e\u043a\u0430\u0436\u0443, \u043a\u0430\u043a\u0438\u0435 \u0438\u043c\u0435\u043d\u043d\u043e […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":84185,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-84184","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Nga m\u00ebkatet vdekjeprur\u00ebse t\u00eb siguris\u00eb s\u00eb faqes: \u00e7far\u00eb m\u00ebsuam nga statistikat e skanerit t\u00eb dob\u00ebsive p\u00ebr nj\u00eb vit | ProHoster","description":"P\u00ebr rreth nj\u00eb vit m\u00eb par\u00eb, ne n\u00eb DataLine filluam nj\u00eb sh\u00ebrbim p\u00ebr k\u00ebrkimin dhe analizimin e dob\u00ebsive n\u00eb aplikacionet IT.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/smertnye-grehi-bezopasnosti-sajta-chto-my-uznali-iz-statistiki-skanera-uyazvimostej-za-god","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0421\u043c\u0435\u0440\u0442\u043d\u044b\u0435 \u0433\u0440\u0435\u0445\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0441\u0430\u0439\u0442\u0430: \u0447\u0442\u043e \u043c\u044b \u0443\u0437\u043d\u0430\u043b\u0438 \u0438\u0437 \u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0438 \u0441\u043a\u0430\u043d\u0435\u0440\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0437\u0430 \u0433\u043e\u0434 | ProHoster","og:description":"\u041f\u0440\u0438\u043c\u0435\u0440\u043d\u043e \u0433\u043e\u0434 \u043d\u0430\u0437\u0430\u0434 \u043c\u044b \u0432 DataLine \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u0441\u0435\u0440\u0432\u0438\u0441 \u0434\u043b\u044f \u043f\u043e\u0438\u0441\u043a\u0430 \u0438 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0418\u0422-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u0445.","og:url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/smertnye-grehi-bezopasnosti-sajta-chto-my-uznali-iz-statistiki-skanera-uyazvimostej-za-god","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-06-05T17:42:31+00:00","article:modified_time":"2020-06-05T17:42:31+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"84184","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 15:03:50","updated":"2022-09-30 12:56:20","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/84184","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=84184"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/84184\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/84185"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=84184"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=84184"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=84184"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}