140 posts
Every system has a login feature, and it's an indispensable battleground that developers, users, and even hackers all target first. The login logic has been discussed a lot online, but there's one pitfall beginners easily forget: the message returned in the login or forgot-password feature reveals whether an account exists.
Huawei Mobile Search's AspiegelBot crawler was recently found by webmasters scraping site info at high frequency. This AspiegelBot crawler mainly simulates an Android phone to scrape, and its UA identifier doesn't mark which company the crawler belongs to — clearly not wanting to be discovered. Later webmasters dug deeper and found the crawler belongs to AspiegelBot, an Irish subsidiary under Huawei Search; many small sites were directly scraped to a standstill.
ip.renfei.net pairs with DDNS dynamic DNS resolution for resolving dynamic IPs. In a dynamic-IP environment, it conveniently updates domain resolution records in time. On Linux, use curl ip.renfei.net to quickly query the public outbound IP. In a browser, use JavaScript to request ip.renfei.net to get the user's public IP address.
Recently, the Baidu Webmaster Platform (Baidu Search Resources Platform) updated and revamped, adding Quick Inclusion; the original URL submission became Normal Inclusion, and the original URL submission feature removed manual submission, meaning webmasters need coding knowledge to integrate Baidu Webmaster Platform's API to submit. But in my view, this newly added Quick Inclusion is just the previous Bear Palm (Xiongzhang) submission interface.
I suddenly realized my first registered domain was 8 years ago. Eight springs and autumns have passed; I'm no longer the youth of those years but someone approaching thirty, recalling the webmasters and big names of that time.
Google, the world's number one search engine, has long supported webmasters proactively pushing pages, but not through a visual interface for ordinary users — it is done via a programming API. Many webmasters are not professional developers, and because Google requires verifying site ownership, I cannot simply build a visual interface where webmasters enter their own keys. So I wrapped Google's API in a secondary layer to lower the difficulty of using it.
Recently I updated my site's code to add the rel=noopener tag to friendly links and external links, so today let's discuss why we use the rel=noopener tag. In fact, this is a security vulnerability — JavaScript provides window.opener to get the Window object that created the window, and that's where the problem begins. Let's take it step by step.
As webmasters carefully build up their sites, traffic keeps growing, and most will then want to place ads to monetize that traffic — to cover server and bandwidth costs or even turn a profit. New webmasters just getting into site advertising may not know the jargon; many ad models are labeled CPA, CPS, CPM, CPT, CPC. Here's a plain-language explanation of what they mean.
Today I suddenly noticed a spike in my site's traffic, with an extra chunk of referral traffic. Per the traffic stats it came from the classic-cases section of the official REN domain website, where my site sits last under the 'Personal Blog: Programmer Tech Blog' category.
Since you're reading this, you're probably already familiar with Nginx, so I won't repeat its installation and configuration. We'll go straight to integrating Nginx with Naxsi. If Nginx is still new to you — you don't know where the config file is or how to compile — this article isn't for you yet; please get comfortable with Nginx installation, configuration, and compilation first.
