Web Hosting Geeks' Blog - News, Trends, Discussions. http://webhostinggeeks.com/blog Web hosting blog - industry news, trends, products and discussions. Fri, 03 Jul 2009 17:35:47 +0000 http://wordpress.org/?v=2.6.2 en webhostinggeeks/bloghttp://feedburner.google.com How to Select the Approprite Load Balancing Technology http://webhostinggeeks.com/blog/2009/07/03/how-to-select-the-approprite-load-balancing-technology/ http://webhostinggeeks.com/blog/2009/07/03/how-to-select-the-approprite-load-balancing-technology/#comments Fri, 03 Jul 2009 17:35:47 +0000 CommunicateBetter http://webhostinggeeks.com/blog/?p=404 Load balancing is a hot topic in the web hosting industry as the technology is being increasingly used in server farms and shared hosting environments.  Its purpose is to fine tune computer systems and networks in a manner that better evenly distributes data and processing across available resources to prevent a single device from being overloaded.  Some of the busier websites utilize two or more servers in a load balancing scheme. Therefore, if one is overwhelmed, traffic is forwarded to another with more capacity.

Common Types of Load Balancing

The process of load balancing is one that can be achieved in a variety of ways.  If this is a technology you are interested in, it is best to know what methods are available to you.   After learning a little more about the types of load balancing, you will should be able to better determine which option works best.

Round Robin DNS Load Balancing

One of the earliest adopted techniques, round robin DNS load balancing uses the round robin feature built into the BIND DNS server to facilitate cycles through the IP addresses corresponding to a farm of servers  This is one of the easiest and most inexpensive methods to implement.  The downside to this type of load balancing is that the DNS server doesn’t have any knowledge of the server’s availability.  Therefore, there is a possibility that data could be continuously forwarded to an unavailable server.  There is also a chance that an IP address will be cached by other nameservers and not sent to the server designated for load balancing.

Hardware Load Balancing

With hardware load balancing, TCP/IP packets are routed by a device to numerous servers in a cluster, a method that leverages circuit level gateway to route traffic.  This method is said to create a powerful topology with a high level of availability.  The one big drawback is a cost that is often considerably higher than other methods.

Software-based Load Balancing

The software-based variation is the most commonly used load balancing method.  These type of load balancers are typically integrated as components in proprietary web servers and application server platforms.  This technique is more configurable and offers the ability to implement intelligent routing based on various input parameters.  In many cases, software-based load balancing requires additional hardware be provided to isolate the load balancers.

Narrowing Your Options

The decision of choosing a load balancing configuration based on hardware or software should be made on one’s particular needs.  For instance, if your website only requires load balancing to serve HTML pages or lightweight dynamic, data-driven pages, the round robin method should be sufficient.  On the other hand, if your traffic and data processes are more demanding, you would probably get the best performance out of the more advanced software or hardware methods.  Whatever method you take, keep in mind that the load balancer should be able to deliver intelligent monitoring to evenly distribute the load.  Depending on your situation, different techniques can better direct the loads to the servers that are more capable of handling them than others in the cluster.

]]> http://webhostinggeeks.com/blog/2009/07/03/how-to-select-the-approprite-load-balancing-technology/feed/ Digitalus CMS Review http://webhostinggeeks.com/blog/2009/07/02/digitalus-cms-review/ http://webhostinggeeks.com/blog/2009/07/02/digitalus-cms-review/#comments Thu, 02 Jul 2009 17:42:01 +0000 CommunicateBetter http://webhostinggeeks.com/blog/?p=402 Released in August of 2008, the Digitialus content management system is a relatively new player in the open-source CMS market.  Version 1.5 recently hit the scene and sparked developers’ attention with features such as a web-based installer, globalization capabilities and the 960 Grid system page layout management tool.  Some of these features are incredibly easy to use while others call for you to be somewhat of a technical geek.  And even though Digitalus is still in the early stages of development, it has made some notable improvements by adding functionality found in some of the more well known systems.  Here is a rundown on the latest version of the Digitalus CMS.

The 960 Grid

One of the major highlights of the new Digitalus CMS is its integration with a CSS framework known as the 960 Grid System.  This system strives to streamline website development by providing dimensions based on the common width of 960 pixels.  The built-in Grid 960 Helper builds the CSS grid that allows this method to work, ultimately making it easier to create cross-browser friendly template layouts and cater to various users.

The helper is essentially a PHP class in the Zend Framework.  According to Digitalus Media president Forrest Lyman, the Grid 960 Helper is now referred to as a component and a part of the core library.  The component creates an XHTML layout grid and all the appropriate classes to incorporate with the Grid 960 CSS framework.  While this feature is incredibly useful, it is not mandatory as you can also build standard PHP scripts to use for your layouts.

User Management

Another major draw to Digitalus CMS is the user management, which should be quite simple to grasp for most people.  The software allows you to create two types of users: a Site Administrator and Super Administrator.  The former has granular control while the latter has access to everything.  If you check out the Digitalus Wiki, you will see that adding multiple users can be a rather “tedious task.”   The good thing is that the software lets you clone user permissions with a featured called Copy User Permissions.   For the most part, the user and permissions management tools are simplistic but could use a little more in terms of functionality and user-friendliness.

Conclusion

All in all, Digitalus is a nice content management tool that still has some maturing to do.  In an open-source CMS market saturated with products that all seem to do the same thing, the choice usually boils down to what best suits your needs as well the drawbacks you can deal with.  Because Digitalus is a newcomer and therfore is not yet proven like other systems, it may not be the solution for all applications.  If you need a CMS or publishing tool that offers basic capabilities, try taking a look at some blogging platforms such as WordPress or b2Evolution because they are a bit more functional, user-friendly and able to cover a greater range of needs.

]]> http://webhostinggeeks.com/blog/2009/07/02/digitalus-cms-review/feed/ Umbraco: The Microsoft .NET-based Open-source CMS http://webhostinggeeks.com/blog/2009/07/01/umbraco-the-microsoft-net-based-open-source-cms/ http://webhostinggeeks.com/blog/2009/07/01/umbraco-the-microsoft-net-based-open-source-cms/#comments Wed, 01 Jul 2009 17:50:03 +0000 CommunicateBetter http://webhostinggeeks.com/blog/?p=400 Originally released in 2001, Umbraco is one of the only open-source content management systems built on ASP and Microsoft’s .NET technology stack.  To no surprise, the platform isn’t necessarily made for beginners, yet developers who prefer to utilize .NET web technologies.  For those who are not familiar, this article will provide more detail on the features and capabilities of the Umbraco CMS.

Core Technologies

Umbraco is a content management solution that thrives off Microsoft web technologies, running on the Windows Server platform and SQL Server or VistaDB database system.  Built on the NET 2.0 framework, ASP.NET 2.0 and C#, it supports both NET User Controls and .NET Customer Controls without having to do much at all as they can easily be added using macros.  The CMS also provides you with full access to the Umbraco API, which has more than 15,000 lines of code.

Presentation

Unlike other open-source systems, Umbraco doesn’t have a template engine, yet a single template system, which can be viewed as both an advantage and disadvantage.  The good aspect is that you do not have to learn a brand new programming language in order to create your website.  With Umbraco, you can design your site with a popular tool such as Abode DreamWeaver or FrontPage, cut and paste the HTML code into the template editor and save.  When you render a page using the template system, the content can be automatically displayed in dynamic fashion.

The Umbraco CMS gives you complete control over your website design.  There is no need to scan the web for themes as the design can be anything you desire.

Umbraco Content

In the Umbraco environment, the core foundation of your site is the Document Type.  The Document Type refers to the type of content that can be incorporated into your website.  Prime examples include Articles, News Items, your HomePage and SearchPage.   Determining how Document types work is key to grasping the Umbraco application itself.  While this isn’t the easiest part to decipher, once you get a solid understanding of these concepts, the rest of system will become much easier to comprehend.

Administrative Functions

The Umbraco Back Office is where you can perform a variety of administrative tasks.  The number of tasks others can perform all depends on their roles and permissions.  Some of the management options you have are dealing with scripts, custom templates, media and document types, style sheets and programming languages.  There is also a section made for developers, allowing you to perform actions such as adjusting browser cache settings, manage data types, create macros, Python files and more.

Conclusion

The Umbraco CMS makes an ideal solution for the Microsoft .NET savvy developer.  It has become very popular over the last few years, now averaging approximately 7,000 downloads per month.  Though not an out-of-box, user-friendly content management tool like Joomla or Mambo, Umbraco’s power and straightforwardness makes it a winner.  If you’re looking for a .NET-driven system to create a content-rich, dynamic website, the Umbraco CMS is worth checking out.

]]> http://webhostinggeeks.com/blog/2009/07/01/umbraco-the-microsoft-net-based-open-source-cms/feed/ The Pros and Cons of Windows VPS Hosting http://webhostinggeeks.com/blog/2009/06/30/the-pros-and-cons-of-windows-vps-hosting/ http://webhostinggeeks.com/blog/2009/06/30/the-pros-and-cons-of-windows-vps-hosting/#comments Tue, 30 Jun 2009 17:40:43 +0000 CommunicateBetter http://webhostinggeeks.com/blog/?p=398 Short for virtual private server, VPS represents an increasingly popular type of web hosting that is established by partitioning a single physical server into multiple virtual servers.  Each server has its own private environment and is capable of running independently from its counterparts.  A VPS has its own fully developed operating system and can also be rebooted independent of the other virtual servers on the machine.  A VPS offers much greater performance than a shared server and while it still lacks in comparison to a dedicated server, it does share many of the same qualities.  A virtual private server provides you with a great deal of freedom and has garnered the reputation of being notably more affordable than a single physical server.

Microsoft’s Contribution

VPS hosting in enabled by a certain type of software that has the ability to control the multiple servers.  With the introduction of Windows Server 2008 and Hyper-V, hosting providers have access to a more secure and reliable platform to deliver VPS solutions.  Windows VPS hosting received its big start with Windows Virtual Server 2007,  a platform that while serviceable, could not complete with offerings on the market by vendors such as VMWare.  Thanks to Microsoft’s recent innovations, Windows VPS hosting customers are now ensured a dramatically improved performance that can be enhanced through integration with VMWare and other virtualization software packages.

The Advantages of Windows VPS

A Windows VPS platform offers an environment most administrators and developers really appreciate.  The familiar Windows desktop interface makes setting up an account a seamless and easy process.  Because of this, most users can easily adapt to and thrive in this environment.  A Windows VPS server is ideal for individuals and businesses that have a need to run high-traffic websites, complex web applications, or custom services that simply aren’t recommended for a shared server.   With the array of new security features implemented into the Windows Server 2008 operating system, the Windows platform has become one of the most secure VPS hosting solutions available.

The Disadvantages of Windows VPS

There is one major drawback to a Windows VPS and that is the significant amount of resources it demands from the server.  The good thing is that this problem can addressed by running the Windows 2008 Core installation.  This gives you a scaled down version of the platform with select features and services.  If you have a need to run a large number of applications, you might be better suited for a dedicated server as it will give you the best possible performance.

When comparing it to the open-source Linux operating system, another knock on Windows VPS hosting could be the cost factor.  Linux and its core components are released under a license that allows them to be freely distributed and this is often reflected in the cost of service.  Windows on the other hand, comes attached with costly licenses that can send the price soaring.

Minor drawbacks aside, Windows is an excellent choice for running a virtual private server. With the backing of reliable hardware, the superb performance, flexibility and security it offers makes it a VPS solution you definitely want to consider.

]]> http://webhostinggeeks.com/blog/2009/06/30/the-pros-and-cons-of-windows-vps-hosting/feed/ Finding the Service You Need Through Web Hosting Reviews http://webhostinggeeks.com/blog/2009/06/29/finding-the-service-you-need-through-web-hosting-reviews/ http://webhostinggeeks.com/blog/2009/06/29/finding-the-service-you-need-through-web-hosting-reviews/#comments Mon, 29 Jun 2009 21:03:37 +0000 CommunicateBetter http://webhostinggeeks.com/blog/?p=396 Finding a company to host your website is not a difficult task.  On the other hand, landing one you can trust is a different story.  This article will introduce you to one of the most effective resources for locating an ideal service - the web hosting review.

Narrow Your Choices

It is rather easy to become lost in the array of web hosting providers and types of hosting on the market.  You have many considerations, including companies that offer budget hosting as well as those that allow you to lease your own server with a dedicated hosting package.  The search gets even more confusing when factoring in features and technical jargon such as disk storage, data transfer and domains.

All of this can be very overwhelming for someone who does not possess the first clue of which type of service is best for their particular needs, and due to the sea of options, these feelings can even be perceived by seasoned webmasters.   A good way to arm yourself with knowledge about the web hosting market is to read many reviews.  Some of the review sites categorize these hosting providers based on their niche, price and the type of service they offer.  When reading over the details, you can gain valuable insight on which service you can afford and what company you can trust.

Avoid the Disasters

The web hosting industry has become immensely popular in recent years and with this popularity came many sharks and shady practices.  Today, it can be rather difficult to pick out the reliable hosting providers from those simply out to make a buck or a run a scam.  By turning to web hosting reviews, you can avoid these shady companies and find yourself one that can actually be relied upon.  Best of all, the chances of you landing a great deal are tremendous.  The review game has become a business in its own right so the individuals running these sites make it a habit to list providers offering the lowest price on the best service.

Learn About the Hosting Market

Web hosting reviews can help you become more familiar with the market and give you a better idea of what to expect.  They tend to highlight key areas that the novice may not be aware of but should know before purchasing a hosting plan.  When reading reviews you generally learn about the features offered, server capacity, the level of security and more.  In the end, this could help you save precious time you would have otherwise spent researching web hosting companies that may or may not live up to your expectations.  What you can take from these review sites is a list of potential hosting providers and a piece of mind by knowing that you don’t have to overloaded with the rigorous investigating process.

Conclusion

Though researching a web host for yourself is never a bad idea, taking the time to read reviews can let you know just what’s out there and give you an idea of what company may be able to pave the road to your success online.  Whether you need a simple personal site or plan to start up a web-based business, some good reviews will put you in the right direction.

]]> http://webhostinggeeks.com/blog/2009/06/29/finding-the-service-you-need-through-web-hosting-reviews/feed/ Enhancing Your Website with phpBB Hosting http://webhostinggeeks.com/blog/2009/06/26/enhancing-your-website-with-phpbb-hosting/ http://webhostinggeeks.com/blog/2009/06/26/enhancing-your-website-with-phpbb-hosting/#comments Fri, 26 Jun 2009 17:14:26 +0000 CommunicateBetter http://webhostinggeeks.com/blog/?p=394 Since being released in the year 2000, phpBB has been one of the most widely used bulletin board solutions on the market.  Today it stands alone at the top as the number one open-source forum software in the world.  While the platform has been greatly improved over the years, phpBB has always offered a powerful set of features such as private messaging, intuitive permission systems, search functionality, a customizable template and language system and support for popular databases.

Key phpBB Features

The phpBB forum software is loaded with features that appeal to administrators, moderators and end-users.  Some of the most noteworthy features include:

Private Messages

- Send messages to multiple recipients

- Send messages to groups

- Send BCCs (Blind Carbon Copies)

- Forward messages

- Export messages

- Friends list (address book)

- Attach files to private messages

- Private message drafts

- Private message folders

- Private message filters

- Conversation view

Registration

- Limit registration attempts

- Set minimum and maximum login ID length

- Set minimum and maximum password length

- Regulate login ID characters

- Establish password complexity requirements

- Enforce password changes

- Enable and disable COPPA

- Allow and deny email address re-usage

Built-in Search Engine

- Search topics within the site

- Search within topics

- Search through multiple categories and forums

- Search within first post of a specific topic

- Enable search flood interval to reduce server load

- Search capabilities within backend database

Administrative Control Panel

- Enhanced interface with more accessible and flexible tab layout

- Modular system provides for easy extensibility

- Allow and deny access to various administrative functions

- Founder status bulletin board creation

- New design for easier use

Moderator Control Panel

- Easy management of moderation queue

- Comprehensive lists of warnings and reports

- Forum, topic and post detail views

Polls

- Multiple options for each user

- Allow and deny vote changes

Usergroups

- Multiple group leaders

- Set display color specific group members

- Set group ranking

- Create group avatars

Profile View

- Comprehensive user statistics on profile view

- Usergroups on profile view

- Signature on profile view

Permissions System

- Enhanced and more flexible system

- Easy permissions via assigned roles

- Enhanced administrator and moderator access

- Global moderators

User Management

- Advanced user interface

- Modify user preferences

- Modify group memberships

- Display and edit all user attachments

- View permissions directly

Availability and Requirements

Incorporating a forum into your website is a great way to establish a community and encourage audience participation.  There are a number of programs that can help you achieve these goals and some of the best ones are of the open-source variety.  Being that the software has become so incredibly popular, most web hosting providers offer full support for phpBB.  Hosts that utilize cPanel as their control panel allow you to install the application right through Fantastico.  In just a few easy clicks, your website can be enhanced by one of the most powerful online bulletin board systems in the world.   All you need to run phpBB efficiently is a web server equipped with the PHP programming language and a supported database.  Although MySQL is the database used most often, the platform also supports database management systems such as PostgreSQL, Microsoft SQL Server, SQLite, Oracle, Firebird, OpenLink Virtuoso and several others.

]]> http://webhostinggeeks.com/blog/2009/06/26/enhancing-your-website-with-phpbb-hosting/feed/ Rackspace Cloud Powers WWDC 2009 http://webhostinggeeks.com/blog/2009/06/25/rackspace-cloud-powers-wwdc-2009/ http://webhostinggeeks.com/blog/2009/06/25/rackspace-cloud-powers-wwdc-2009/#comments Thu, 25 Jun 2009 18:01:54 +0000 CommunicateBetter http://webhostinggeeks.com/blog/?p=392 Last week, Rackspace’s cloud hosting solution helped to deliver live blog coverage of Apple’s Worldwide Developers Conference 2009.  Hosted at blog site live.gdgt.com, the robust platform easily handled 4.7 million page views in under two hours.

Ryan Block, live.gdgt.com co-founder, was able to present a real-world demonstration on the power and value of cloud computing through his blog using Rackspace’s Cloud Sites solution.  With the help of his photographer, he was able to simultaneously capture and upload images in real-time to the Cloud Files service, which is automatically integrated into the site.  This activity all took place while serving an estimated 656 page views per second to worldwide viewers with minimal cost and hassle.

Mr. Block said the Rackspace Cloud enabled his team to quickly iterate and scale their live coverage without needing to make major investments in hardware or operations.  He says that the Rackspace support staff went above and beyond to help prepare for the event, providing essential input and attentiveness to maintain availability despite the unbelievably heavy traffic load.

The Cloud Sites solutions sells for $100 per month while Cloud Files is available on a pay-as-you-go basis with service starting at $0.15 per GB of data.  With Cloud Files, customers have the option of serving content files leveraging the Limelight Networks CDN (content delivery network) in real-time without any extra efforts and only paying for what they need.  Rackspace customers also get the benefit of 24/7 Fanatical Support for any questions of concerns they may have about their hosting account at no additional cost.

The approximate cost difference between the DIY hosting approach opposed to deploying Cloud Sites or Cloud Files for this type of event portrays the cost benefits of cloud computing.  Physical space, hardware, software and management costs for a state of the art data center capable of handling such a traffic load would cost tens of thousands of dollars.  When utilizing Rackspace’s cloud solutions, it is likely to only cost a couple hundred dollars.

The Rackspace Cloud delivers on-demand website, application and storage hosting backed by some of the best support in the industry.  Through a suite of cloud solutions in Cloud Sites, Cloud Files and Cloud Servers, the Rackspace Cloud gives knowledgeable IT managers and developers the ability to reduce the high-cost investments and hassles associated with dedicated hardware, all while allowing them to easily scale their hosting resources.

About Rackspace

A leader in the industry of hosting services, Rackspace Hosting is changing the way businesses around the world approach their IT operations.  The company provides a number of solutions including computing-as-a-service, incorporating the latest innovations into a highly flexible offering that makes computing more reliable and affordable.  Rackspace specializes in solutions that enable businesses and IT teams to be more efficient.  Distinguished by its award-winning Fanatical Support, the company continues on its mission be one of the best service providers in the world.  The Rackspace portfolio includes a number of hosted IT services such as Managed Hosting, Cloud hosting, email and application hosting.

]]> http://webhostinggeeks.com/blog/2009/06/25/rackspace-cloud-powers-wwdc-2009/feed/ Critical Factors to Consider When Evaluating Application Hosting http://webhostinggeeks.com/blog/2009/06/24/critical-factors-to-consider-when-evaluating-application-hosting/ http://webhostinggeeks.com/blog/2009/06/24/critical-factors-to-consider-when-evaluating-application-hosting/#comments Wed, 24 Jun 2009 18:38:44 +0000 CommunicateBetter http://webhostinggeeks.com/blog/?p=390 Application hosting services are increasing in demand as more business come to realize that outsourcing to a qualified managed service provider can greatly enhance the deployment process and reduce costs across the board.  To help you find a service that meets the needs and expectations of your organization, we have listed some of the important factors that must be considered for an application hosting solution.

Storage Requirements

Because storage can be a rather costly proposition, it is best to take a just-in-time approach towards your inventory.  By answering the questions below, you can draw a more accurate picture that might defer costs until they are absolutely vital:

- How much storage do you need now?

- How much storage will you need in the next 3 to 5 years

- How much additional storage will you require each year?

- Will you need to archive data and pull it from the main storage area?  If so, how much and when?

Applications to be Hosted

How many applications do you need to host and what type of applications are they?  Staging, testing, development and deployment are just some of the environments you may need hosted.  In most cases, each environment has different hosting requirements in terms of availability, operational tasks, access and support.  Make sure you assess the use and flow of data within and between these applications to precisely determine the requirements for each one.

Backup and Restore and Disaster Recovery

Before deciding on an application hosting provider, it is critical to define what is to be backed up, when and how often.  When focusing on this area, it is also a good idea to keep disasters in mind and think of what would happen if something bad occurred and the provider’s data center became completely unusable.  This is a place where you need to put a business continuity plan into effect.

SLA Monitoring and Reporting

Key performance indicators come in handy, but only when they detail what is important to your organization.  Make sure you know what levels of availability the service level agreement covers as well as the applications that will be monitored.  If monitoring reports are available, find out how they are to be structured and provided.

Root Access

System root access usually isn’t given to parties outside of the data center staff.  It is also important to know that some application providers will waive their SLAs if they can determine that a non-root access account is the cause of an outage.  Because this can have a major impact on your availability, it is vital that you inquire within the provider about their root access policies before signing the contract.

The Service Contract

When it comes to application hosting, contracts define much more than what products or services will be provided and how much they cost.  They also explain how organizations are to interact with each other.  It is wise that you go over the contract with a fine tooth comb to prevent confusion and enable a framework for dispute resolution and continuous enhancements.

]]> http://webhostinggeeks.com/blog/2009/06/24/critical-factors-to-consider-when-evaluating-application-hosting/feed/ Yahoo Releases its Distribution of Hadoop http://webhostinggeeks.com/blog/2009/06/23/yahoo-releases-its-distribution-of-hadoop/ http://webhostinggeeks.com/blog/2009/06/23/yahoo-releases-its-distribution-of-hadoop/#comments Tue, 23 Jun 2009 18:02:07 +0000 CommunicateBetter http://webhostinggeeks.com/blog/?p=388 Internet powerhouse Yahoo, just made its distribution of Hadoop available while hosting the Second Annual Hadoop Summit.  Under the Apache Hadoop project, Hadoop is a distributed file system and parallel execution environment that allows users to process large amounts of data.  Acting on requests from the user community, Yahoo decided to open up its investment in quality engineering for the benefit of the larger ecosystem and aid in the innovation of open collaborative research and development.  Its distribution of Hadoop has been thoroughly tested and deployed on the world’s largest Hadoop clusters.

Justin Erenkrantz, Apache Software Foundation President, noted his excitement to see how the Apache Hadoop project has progressed over the last few years.  He says the foundation is looking forward to witnessing the community’s growth accelerate with Yahoo’s continuous support and commitment to quality, factors that will ultimately attract more contributors to the Apache Hadoop project.

Mike Olson, CEO of Cloudera, states that the general availability of Yahoo’s Hadoop source code will make its own distribution of Hadoop more robust and scalable.  He says Cloudera will continue to work with Yahoo to implement the tried and tested source code into its commercial distribution.  According to Olson, the Cloudera distribution of Hadoop is an enterprise-ready version complete with key tools, utilities, customer service and technical support, features designed to help enterprises deploy and maintain the Hadoop platform for larger scale data processing and management needs.

Considered one of the pioneers, Yahoo has led the way in development and is now the leading contributor to the Apache Hadoop project.  Doug Cutting, Hadoop founder, joined Yahoo in 2006 and the company immediately began making significant investments in developing the project.  Hadoop currently underpins several of Yahoo’s properties, including Yahoo Search, Yahoo mail and a variety of its content and advertising services.  In Yahoo data centers, Hadoop runs on well over 25,000 servers and analyzes billions of web pages, petabytes of storage and billions of new records on a daily basis.

To demonstrate the community collaboration of the Hadoop project, Yahoo hosted the second annual Hadoop Summit on June 10 in Santa Clara, California.  Co-sponsoring the event was Cloudera, Amazon Web Services, IBM, Sun Startup Essentials and Lightspeed Venture Partners.  The event brought hundreds of members from the Hadoop user and developer communities together to learn and share ideas with each other.  The Hadoop Summit focused on all the advancements made in the development and deployment of the project and its related technologies.  It also touched on case studies of the applications being created and deployed on Hadoop as well as discussions on the platforms’ future directions.

Yahoo’s distribution of Hadoop is available via the Yahoo Developer Network.  Cloudera’s distribution, which includes the Yahoo source code, is available at cloudera.com.

About Yahoo

Headquartered in Sunnyvale, California, Yahoo is a globally renown internet brand and leading web hosting provider.  The company is dedicated to empowering its community of customers, users, publishers, advertisers, and developers by establishing indispensable services based on trust and reliability.  The Yahoo brand is currently one of the most trafficked internet destinations in the world.

]]> http://webhostinggeeks.com/blog/2009/06/23/yahoo-releases-its-distribution-of-hadoop/feed/ The Insecurity of Web Upload Forms http://webhostinggeeks.com/blog/2009/06/22/the-insecurity-of-web-upload-forms/ http://webhostinggeeks.com/blog/2009/06/22/the-insecurity-of-web-upload-forms/#comments Mon, 22 Jun 2009 18:37:53 +0000 CommunicateBetter http://webhostinggeeks.com/blog/?p=386 Convenience aside, allowing anonymous visitors to upload files to your site is pretty much like opening the gates and telling malicious users it is okay to compromise your server.  This puts you, the website owner, in a very tough position when considering that such permissions have become a commonality on today’s internet and has proven to increase business efficiency.

Having the ability to upload files is a regular occurrence on social networking sites such as FaceBook, MySpace and Twitter as well blogs, forums and online banking sites.  This feature is also prevalent in corporate portals as it allows end-users to share files with business employees.  In these environments, users are permitted to upload documents, pictures, music, videos and several other types of files.  The more functionality an end-user is provided with, the greater the probability of creating a vulnerable web application.  It is a known fact that many internet users abuse their privileges to gain access to a specific site or compromise a web server.

During recent tests, security experts have discovered that an alarming number of widely used web applications are not making use of secure upload forms.   According to their findings, many of these vulnerabilities were easily detected and exploited, allowing experts to gain full access to the file system on the web server hosting those applications.   Most of these vulnerabilities were the direct result of improper security configurations, essentially permitting intruders to roll right in.

Viable Solutions

Below is a list of practices you or your system administrator should enforce when file uploads are allowed to your website or web applications:

- Create an .htaccess file that only permits access to files with allowed extensions

- Do not the put the .htaccess file in the same directory where the files uploaded by users will be stored.  This file should be stored in the parent directory that your visitors do not have access to.

- The average .htaccess file that only allows files such as jpg, jpeg, gif and png files should include the following lines:

“deny from all

<Files ~ “^\w+\.(gif|jpe?g|png)$”>

order deny,allow

allow from all

</Files>”

These lines can be adjusted to suit your own personal needs.  Editing the .htaccess file in this manner will not only assure that only these file types are allowed, but also protect you from double extension attacks.

- If at all possible, make sure the files uploaded by users are placed in a directory outside of the server root.

- Do not allow existing files to be overwritten.  This will prevent exploits such as the .hataccess overwrite attack.

- Do not rely solely on client-side validation.  This is simply not enough to ensure an adequate level of security.  It is advisable to implement both client-side and server-side validation.

Conclusion

There are several ways a malicious user can bypass the security configurations applied to a file upload form.  When incorporating such a feature into your web applications, you should make it a priority to follow the best security practices and put them to the test on a regular basis.  While this requires a considerable amount of security expertise, it is worth every bit of time to make sure your website is protected.

]]> http://webhostinggeeks.com/blog/2009/06/22/the-insecurity-of-web-upload-forms/feed/