Test and patch your website / server against the httpoxy security vulnerability

Delivery in
3 days
Response time

  • Views 1,187
  • 0

What you get with this Hourlie

The httpoxy vulnerability, announced in July 2016, is a potentially serious security vulnerability affecting many websites. The problem has actually existed for around 15 years, but it's now been seen 'in the wild' - in other words, it's out there.

It has potentially serious implications if your website and/or server is vulnerable, although not every site / server is affected. The httpoxy website explains more. You might want to check the information before continuing.

If you care about the security of your website and/or server and want to make sure you're protected against this vulnerability, this Hourlie is for you.

I'm a professional, UK-based web developer and server admin, working regularly on issues such as these.

Included in this Hourlie:

- testing your website and/or server for the vulnerability
- if vulnerable, patch your website and/or server so it is no longer vulnerable
- if not vulnerable, let you know that fact

This Hourlie is for a single website or server.

If you run your own VPS or dedicated server (Linux based) then I will test/patch your primary web server software (e.g. Apache).

Also... does your site run on HTTPS / SSL (a secure connection using an SSL certificate)?

It's not just important to have your site running on SSL / HTTPS. It's vital that the QUALITY of your host's or server's SSL setup is good. You may have heard of Heartbleed or POODLE - just two further vulnerabilities that have affected some supposedly secure servers in the past. So, using your SSL certificate is a big step, but making sure that the SSL setup on your hosting / server is as strong and vulnerability-free as possible is also vital.

As an additional service I can run a full, in-depth audit on your site and hosting/server SSL setup using one of the world's leading reporting tools. I will carry out up to an hour's work to fix things in the report that are possible to fix on your hosting/server AND for anything I can't fix directly or that's outside the time allowed, I'll provide a list of remaining issues. It's up to your host whether or not they can/will fix any issues that can't be fixed directly, but you'll be armed with the information to make an informed decision about the quality of your hosting.

I hope I can help you build the security of your site.

Get more with Hourlie Add-ons

  • I can run a full audit of the quality of your SSL setup and do up to an hour's work to resolve issues

    Additional 2 working days

  • I can deliver all work in 1 working day

What the Seller needs to start the work

To get started, I'll need:

- your website's address
- full access to your website's hosting or web server
- if you'd like me to check your server, details of which web server you run and how many websites are on the server