Stuff to review

http://www.codinghorror.com/blog/2007/10/a-visual-explanation-of-sql-joins.html

rpm -V output:
S file Size differs
M Mode differs (includes permissions and file type)
5 MD5 sum differs
D Device major/minor number mismatch
L readLink(2) path mismatch
U User ownership differs
G Group ownership differs
T mTime differs

Posted in Linux | Comments Off on Stuff to review

Best Practices for WordPress sites

Best practice from my experience when it comes to WordPress and permissions is:
• Owner: SFTP/site user
• Group: apache
• Directory Permissions: 02775 (drwxrwsr-x)
• File Permissions: 0664 (-rw-rw-r–)
• Directory ACLs: default:user:siteUser:rwx, default:user:apache:rwx, user:siteUser:rwx, user:apache:rwx
• File ACLs: user:siteUser:rw-, user:apache:rw-

The following lines added to wp-config.php help as well:
define(‘FS_METHOD’,’direct’);
will allow you to update any part of the WordPress installation from within the control panel without having to log in manually
define(‘FS_CHMOD_DIR’,02775);
define(‘FS_CHMOD_FILE’,0664);

The reason for the ACLs are that new files are created with a umask of 0022 on CentOS5 when utilizing SFTP (SSH FTP) so Apache would slowly lose write capability on these files as you created new ones via SFTP otherwise. This is also the optimum configuration for allowing WordPress to update itself via the control panel. If that is unnecessary or undesired, you can remove the group write and ACL write fields for Apache on files and directories that should not be able to be modified by the PHP code.

The allow_url_fopen option does not need to be set to enabled for fopen()s on files, by the way. Only if you need to do something along the lines of fopen(http://…) to pull in a resource from another site (and this is strongly deprecated as it builds a dependency on that other resource that can cause timeouts in rendering your page if the site that resource exists on goes down or such.)

Posted in Linux | Comments Off on Best Practices for WordPress sites

Verifying port 443

openssl s_client -connect localhost:443

CONNECTED(00000003)
4504:error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol:s23_clnt.c:588:

Posted in Linux, OPENSSL and TLS | Comments Off on Verifying port 443

w3 total cache

Disabling w3 total cache:

edit the wp-config.php file

define (WP_CACHE’, true);
from true to false (i.e. define (‘WP_CACHE’,false);

Command line method of clearing w3 total cache:

delete files form the wp-contentw3tc/pgcache/ directory

http://www.frandimore.com/blog-setup/how-to-delete-w3-total-cache-properly/

Posted in Linux | Comments Off on w3 total cache

Add openstack.compute

git clone git://github.com/jacobian/openstack.compute
cd openstack.compute 
python setup.py build 

sudo python

Posted in Linux | Comments Off on Add openstack.compute

Find largest apache process

ps -ylC apache2 | awk ‘{s+=$8} END {print s/1024/(NR – 1)}’
ps -ylC httpd | awk ‘{s+=$8} END {print s/1024/(NR – 1)}’

To calculate mysql usage:

Calculate MySQL Memory Usage – Quick Stored Procedure

Posted in Linux | Comments Off on Find largest apache process

check for mod_pagespeed

curl -D- http://example.com | grep X-Mod-Pagespeed

shows all zeros if it isn’t installed

if it is installed,

% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
100 966 0 966 0 0 723 0 –:–:– 0:00:01 –:–:– 1618

or alternately curl -D- http://example.com |less

should show something like:

Date: Fri, 07 Sep 2012 21:51:06 GMT
Server: Apache/2.2.3 (CentOS)

X-Mod-Pagespeed: 0.10.22.4-1633

% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
100 966 0 966 0 0 723 0 –:–:– 0:00:01 –:–:– 1618

Posted in Linux | Comments Off on check for mod_pagespeed

subsys is locked

If you get this error when doing service {servicename} status:

{servicename} dead but subsys is locked

You need to remove the {servicename} lock file

rm /var/lock/subsys/{servicename}

Posted in Linux | Comments Off on subsys is locked

Checking whether a security cipher (ECDSA) is available

[root@ssltest test]# cat /etc/redhat-release
Red Hat Enterprise Linux Server release 6.3 (Santiago)
[root@ssltest test]# openssl version
OpenSSL 1.0.0-fips 29 Mar 2010
[root@ssltest test]# openssl ciphers -v | grep ECDSA

Posted in Linux, OPENSSL and TLS | Comments Off on Checking whether a security cipher (ECDSA) is available

hardcode the WordPress siteurl to dev.mysite.com

When creating a dev version of a wordpress site, put the following in your wp-config for an immediate fix:

define(‘WP_HOME’,’http://dev.mysite.com’);
define(‘WP_SITEURL’,’http://dev.mysite.com’);

Another option is to edit the wp_options table as follows:

select * from wp_options where option_name=’siteurl’;

update option_value set option_value=”http://newsite.com” where option_name = ‘siteurl’;

Posted in Linux | Comments Off on hardcode the WordPress siteurl to dev.mysite.com