Waea, WhatsApp+380637610482
Valery Danyuk
Valery DanyukkaiwhakawhanakeTe whakawhanake i ngā taputapu AI mō ngā pakihi. He kounga teitei. He utu tika.Tuhia ki Telegram

Te Tirotiro i ngā Pane HTTP Ipurangi: Ngā Āhuatanga e Tauhohe Ana tō Tūmau, me pēhea te Whakatika

Tirohia ngā pane HTTP ipurangi: te haumarutanga, te keteroki, te kōpeketanga, me te CORS i roto i te urupare tūmau

Ngā mea ka riro i a koe

  • Rārangi o ngā pane urupare tūmau me te kaute haumarutanga i roto i te ōrau - i roto i te tirotiro kotahi
  • Te mārama ki ngā pane e pā ana ki te SEO me te tere, me ērā e pā ana ki te tiaki manuhiri
  • Te whakataurite ki te securityheaders.com, DevTools, me te curl: Ko tēhea te mea watea ake?
Hoatu: i roto i te 10 menetiTiaki: Ngā hāora i pau ki te rapu i te pūtake o te puhoi o te uta me ngā whakatūpato "haumaru kore".

Ko te whakautu poto: hei tirotiro i ngā pane HTTP ipurangi, whakapirihia te wāhitau whārangi ki te HTTP Header Checker a PromoPilot ka pāwhiri i te "Tirohia." Ka whakaatuhia e te taputapu ngā pane urupare tūmau katoa, te whakatauranga ōrau haumarutanga, te keteroki, te kōpeketanga, me ngā tautuhinga CORS, tae atu ki te mekameka tuku ki te URL whakamutunga. Kāore he rēhitatanga e hiahiatia ana. Kei raro nei ka kitea e koe ngā mōhiohio mō ngā pane he mea nui, me pēhea te pānui i ngā hua, me ngā mea hei whakatika tuatahi.

Ka tirohia e au ngā pane o ia kaupapa i mua i te tuku atu: koinei te huarahi e kitea ai e au te haurua o ngā raruraru "ngaro"—he pae tukutuku kāore e pupuri ana i te raraunga, e tuku ana i ngā whārangi me te kore e kōpeke, e wareware ana rānei ki te tiaki i te HTTPS.

He aha te mea e whakaatuhia ana e te tirotiro i ngā pane HTTP?

Ina tono mai tētahi pūtirotiro, tētahi karetao rānei mō tētahi whārangi, ka whakautu tuatahi te tūmau mā te whakamahi i ngā raina ratonga—ngā pane—kātahi ka whakahokia mai te HTML. E whakaahua ana ēnei pane i te āhua o te pupuri i te whārangi, mēnā kua kōpeketia, mēnā ka taea te whakauru ki tētahi atu paetukutuku, me te wāhi hei tuku i te manuhiri.

Rōpū He aha te tirohanga a te taputapu? He aha i hiahiatia ai tēnei e te pae?
Haumaru Kaupapahere-Haumarutanga-Ihirangi, Haumarutanga-Kawe-Pūmau (HSTS), Kōwhiringa-X-Frame Te tiaki i ngā manuhiri mai i ngā tuhinga whakauru me te tinihanga, te tiaki i te HTTPS
Tau Ōrau o ngā pane haumarutanga kua whirihorahia He tohutoro tere: i pai ake, i kino ake rānei i muri i ngā whakatikanga?
Te Kete Mana-Keteroki, Paunga, ETag, Whakarerekētanga-Whakamutunga Ka tere ake te utaina o ngā toronga auau, ka wetekina te tūmau
Te pēhitanga Whakawaehere Ihirangi (gzip, br) He māmā ake te HTML, CSS, me te JS—he tere ake i runga i te waea pūkoro
CORS Mana-Whai-Whakaae-Takinga me ngā mea e pā ana Ko wai ka taea te uru atu ki tō API me ngā momotuhi mai i ētahi atu rohe?
Ngā tukunga anō Ara paraoa pokepoke ki te URL whakamutunga Ka whakaroahia te utaina e ngā mahi tāpiri, ā, ka maumauria te tahua ngokingoki.

Ehara te kaute haumarutanga i te "kaute SEO". E whakaatu ana i te ōrau o ngā pane haumarutanga nui kua whakatakotoria. Ko te hua noa mō tētahi pae kāore anō kia whirihorahia ko te ngaro o te CSP me te X-Frame-Options.

E toru ngā āhuatanga e tika ana kia tirohia ngā pane: i muri i te neke ki tētahi manaaki hou, ki tētahi CDN rānei, i muri i te tāuta i ngā monomai pupuri me te haumarutanga, me mua i te whakarewatanga o ngā pānuitanga, ina he utu nui ia hēkona o te uta. He pai anō te mahi a te taputapu mō te whakawhanake, te whakatakoto, me te whakaputa putanga o tētahi paetukutuku, mena ka taea te uru atu ki te wāhitau mai i te ipurangi.

Me pēhea te tirotiro i ngā pane HTTP o tētahi paetukutuku i runga ipurangi?

Tirohia ngā pane HTTP ipurangi i roto i ngā taahiraa e 4: whakapirihia te wāhitau, whakahaere i te tirotiro, tirohia te whakatauranga me te rārangi pane, whakatikahia ki te tūmau

  1. Whakatuwheratia te taputapu. Ka mahi te tirotiro pane HTTP i roto i tō pūtirotiro—kāore he tāutanga e hiahiatia ana.
  2. Whakauruhia te wāhitau katoa me te kawa: https://example.com/catalog/. Kotahi te tirotiro - kotahi te URL.
  3. Pāwhiritia "Tirohia." Ka tae mai te whakautu i roto i ētahi hēkona ruarua.
  4. Tirohia te whakatauranga haumarutanga me te rārangi o ngā pane ngaro.
  5. Haere mā roto i te keteroki, te kōpeketanga me te CORS, kātahi ko te mekameka tuku anō.
  6. Whakatikahia ngā tautuhinga i tō tūmau, CDN, monomai rānei, ka tirotiro anō.

Kei te whārangi o te taputapu tētahi āpure wāhitau, he pātene manatoko, me tētahi whakamārama poto: he aha ngā mea e tātarihia ana, me pēhea te whakamahi, me ngā herenga.

Whārangi Tirotiro Pane HTTP kore utu a PromoPilot: te āpure URL me te whakaahuatanga o te haumarutanga, te keteroki, me ngā tirotiro CORS

Kei te paetaha te maha o ngā haki e whakaaturia ana i tēnei wā. Ka taea e ngā manuhiri te mahi i ētahi haki i ia rā; i muri i te rēhitatanga kore utu, ka toru te rahinga, ā, ka tukuna he haki mutunga kore ki te mahere Pro utu.

Me pēhea te pānui i te urupare a te tūmau, me te aha te mea hei whakatika i te tuatahi?

Kaua e ngana ki te whakatika i ngā mea katoa i te wā kotahi. Mahi mai i ngā mea e pakaru ana i te urunga me te HTTPS ki ngā mea e whakapai ake ana i te haumarutanga.

  1. Ngā tukunga atu. Ko te mekameka http → https → www → /index.php e toru ngā tono kāore e hiahiatia. I te nuinga o te wā, kotahi te tukunga atu 301 ki te URL whakamutunga e hiahiatia ana mai i tētahi rerekētanga wāhitau.
  2. HSTS. Mena kei te whakamahi noa tō pae i te HTTPS, tāpirihia Strict-Transport-Security: max-age=31536000. Tīmata ki te iti o max-age mena kāore koe i te tino mohio kei te whakahohea ngā roherohe katoa ki te HTTPS.
  3. Kōpeketanga. Mena kāore he Content-Encoding: br, gzip rānei i roto i tō HTML, whakahohea te kōpeketanga i roto i ngā tautuhinga tūmau, CDN rānei. Ka taea e tēnei rarangi whirihoranga kotahi te whakapai ake i te tere.
  4. Te Keteroki. Mō ngā whakaahua, CSS, me te JS me te putanga i roto i te ingoa kōnae, whakatakotoria he keteroki roa ( Cache-Control: public, max-age=31536000, immutable); mō te HTML, whakatakotoria he keteroki poto, no-cache rānei.
  5. Ngā Kōwhiringa-X-Frame me te CSP. X-Frame-Options: SAMEORIGIN i te whakauru i te whārangi ki tētahi atu anga. Whirihorahia te CSP kia tupato: ka taea e te kaupapa here tino pakari te pakaru ngāwari i ngā tātaritanga me ngā widget, nō reira whakahohea te aratau Content-Security-Policy-Report-Only.
  6. CORS. Access-Control-Allow-Origin: * he hapa mō ngā API me ngā raraunga whaiaro. Tena koa tohua ngā rohe motuhake.

Ko tētahi hapa noa ko Cache-Control: no-store ki te pae katoa i muri i te tāutanga o tētahi monomai haumarutanga. E mahi ana te pae, engari ka utaina ia haerenga me te mea ko te tuatahi.

Koinei te āhua o te urupare a tētahi whārangi kua pai te whakarite—he paearu hei whakataurite i ō hua ki:

HTTP/2 200
content-type: text/html; charset=utf-8
content-encoding: br
cache-control: no-cache
strict-transport-security: max-age=31536000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'self'; img-src 'self' data: https:

Ko te waehere urupare ko te 200, kua kōpeketia te whārangi e Brotli, kāore te HTML e rongoatia mō ngā wā roa, kua rakahia te HTTPS mō te tau, ā, kāore e whakaaetia te whakauru ki ētahi atu anga me te whakakapinga momo kōnae. Mena ko tō waehere urupare ko te 301, 302 rānei, kaua ko 200, kāore anō kia tirohia e koe te URL whakamutunga—tirohia te mekameka tuku anō ka whakapiri i te URL whakamutunga.

Whakataurite: PromoPilot me ētahi atu huarahi hei tirotiro i ngā pane matua

He maha ngā huarahi hei tiro i ngā pane kōrero, ā, he pai ia huarahi mō tōna ake āhuatanga.

Utauta He aha te mea kore utu? Ngā Here Mā wai e tika ai?
PromoPilot — Kaitirotiro Pane HTTP Ngā pane katoa, te whakatauranga haumarutanga, te keteroki, te kōpeketanga, te CORS, te mekameka tuku anō Kotahi te URL mō ia tirotiro, te rohe manuhiri o ia rā Tirohia wawetia tō paetukutuku, tō paetukutuku rānei a tētahi atu, me te kore tāutanga
securityheaders.com Whakatauranga reta o ngā pane haumarutanga Haumarutanga anake, kāore he keteroki, he kōpeketanga rānei Mō te hunga e whakatū ana i te parenga
Ngā Utauta Whakawhanake Chrome, ripa Whatunga Ngā pane o ia tono whārangi Me mōhio koe ki hea e titiro ai; kāore he whakahe, he tohu rānei Mō ngā kaiwhakawhanake i te wā e rapu ana i ngā hapa
curl -I i roto i te terminal Ngā pane urupare mata Raina whakahau, kāore he whakamaoritanga Mō ngā kaiwhakahaere tūmau

Whakatau: Mō te tirotiro kotahi-wā me te aromatawai mārama me ngā tohutohu, he pai ake te whakamahi i tētahi taputapu ipurangi, engari he pai a DevTools me curl ina mōhio kē koe ki tāu e rapu ana. Ka tautokohia e Securityheaders.com te tirotiro mēnā ko tō whāinga he tiaki noa iho.

Ko tētahi noa iho tēnei o ngā taputapu SEO kore utu e 87 a PromoPilot: Kei reira anō hoki he tirotiro tiwhikete SSL, he whakawhiti, me ngā tuhinga DNS—ka kapi ēnei i ngā tuhinga o tēnei wāhanga.

Ngā Herenga o te Tirotiro Pane: Ngā Mea Kāore e Whakaaturia e te Utauta

Ka tirohia ngā pane o tētahi URL kotahi, ehara i te mea ko te pae katoa. Ahakoa kua tika te whirihoranga o te whārangi matua, ehara i te mea ka rite tonu te urupare a te whārangi hua, te kōnae rānei i roto i te kōpaki /uploads/.

Ka tāpirihia ētahi pane i te taumata CDN, i te taumata takawaenga rānei, ā, ka whakawhirinaki pea ki te ara me te rohe i ahu mai ai te tono. Nō reira, ka rerekē pea te hua i tāu e kite nei i roto i tō pūtirotiro. Mena ka whirihorahia he ture i roto i te CDN mō /blog/* anake, kāore ētahi atu wāhanga e whiwhi.

Ā, ko te mea nui: he tautuhinga ngā pane, ehara i te ihirangi. Kāore te taputapu e tirotiro i te taitara, te tuhinga, te tohu rānei—he tirotiro whārangi motuhake anō mō tēnā.

Kotahi anō te whakatūpato mō ngā huringa. Whai muri i te whakatika i te whirihoranga tūmau, tērā pea kāore te hua e whakahōu tonu: ka pupuri tonu te CDN i te keteroki urupare tawhito. Mukua te keteroki CDN, tatari rānei mō ētahi meneti, kātahi ka whakahaere anō i te tirotiro.

Āhea te wā kāore e ranea he taputapu kore utu?

Te tirotiro i ngā pane HTTP ipurangi me te tono i tētahi tohunga ki te whirihora i tō tūmau: ngā mahi a ia kōwhiringa

Mā te taputapu e whakaatu pono ki a koe ko ēhea ngā pane e ngaro ana. Heoi, me mahi tahi te tūmau, te CDN, te miihini paetukutuku rānei ki te tāpiri i aua pane. Me whai tohunga koe mēnā:

  • I muri i te whakahohenga o te CSP, ka pakaru ngā puka, ngā utu, ngā tātaritanga rānei;
  • he rerekē ngā pane o ngā wāhanga rerekē, ā, kāore i te mārama ko wai i whakatakoto – te tūmau, te monomai, te CDN rānei;
  • he puhoi te pae, ahakoa kei te "whakahaere" te keteroki me te kōpeketanga;
  • Kāore i a koe te urunga atu ki te tūmau, ā, ka whakautu mai te kamupene manaaki mā te whakamahi i ngā īmēra tauira.

He aha taku e taea ai mō tō paetukutuku?

Ko Valeriy Danyuk tōku ingoa, he kaiwhakawhanake me te tohunga SEO ahau: i roto i ngā tau 12 kua pahure ake nei, kua hanga e au ngā paetukutuku me ngā pūnaha mō te neke atu i te 200 kiritaki. Ko ngā pane kōrero te wāhanga o te SEO kāore e kitea e ngā kiritaki, engari nāku i whakatū tuatahi.

SEO me te whakatairanga

Ngā paetukutuku me ngā toa ipurangi

CRM, kaute me te aunoatanga

He maha atu ngā kaupapa kei roto i taku putea mahi. Tukuna mai tō wāhitau paetukutuku ki Telegram – ka tirohia e au ngā pane kōrero, ā, ka kōrero atu au ki a koe he aha ngā mea ka puta wawe mai ai ngā hua.

Hua

  1. Mā te tirotiro i ngā pane HTTP ipurangi ka kitea i roto i ngā hēkona te urupare a te tūmau ki te pūtirotiro me te karetao rapu.
  2. Whakatikahia kia rite ki te raupapa: ngā whakawhiti → HSTS → kōpeketanga → keteroki → Ngā Kōwhiringa-X-Frame me te CSP → CORS.
  3. Tirohia te whārangi kāinga anake: Ka taea e ngā CDN me ngā monomai te tuku pane rerekē ki ngā wāhanga rerekē.
  4. Mena kāore e wātea ana, e taupatupatu ana rānei ngā tautuhinga tūmau, he māmā ake te tuku i te mahi ki tētahi tohunga, te hanga rānei i te pae ki runga i 1001site, kua whirihorahia kētia te HTTPS me te whakaputa.

Tirohia tō whārangi kāinga inaianei tonu: whakahaerehia he tirotiro pane HTTP kore utu, ā, ki te mea he pātai āu, tuhituhi mai ki ahau i Telegram.

Ngā Pūtake

  • Whārangi taputapu PromoPilot HTTP Header Checker - rārangi o ngā tirotiro me ngā herenga.
  • securityheaders.com - Whakaahuatanga o te aromatawai pane haumarutanga.
  • Ngā tuhinga mō Chrome DevTools - Paewhiri whatunga me ngā pane tirotiro.

Ngā tohutoro me ngā puna

Ngā Pātai me ngā Whakautu

He aha ngā pane haumarutanga he mea nui mō te SEO?

Ka pā tika te HTTPS ki ngā whakatauranga, ā, ka whakapakari ake te HSTS i tēnei: kāore te pūtirotiro e whakatuwhera i te pae mā te HTTP. Ka tiakina e te CSP me te X-Frame-Options ngā manuhiri mai i ngā tuhinga kua werohia me te whakauru whārangi ki roto i ētahi atu anga. Ka ngaro te whakawhirinaki o ngā miihini rapu ki tētahi pae kua taumanutia me te waehere kino, nō reira he kaupapa here inihua whakatauranga ēnei pane.

He pēhea te pānga o ngā pane pupuri ki te tere?

Mā te Cache-Control me te ETag ka mōhio te pūtirotiro ki te roa o te wā e penapena ai i ngā whakaahua, ngā momo kāhua, me ngā tuhinga. Mēnā he keteroki tika, ka tangohia noa iho ngā mea kua hurihia e te hokinga mai, ā, ka tere ake te utaina o te whārangi. Ki te kore he keteroki, ka tangohia anō e te pūtirotiro ngā mea katoa i ia wā, ā, ka kitea nuitia tēnei i runga i ngā taputapu pūkoro.

Ka taea te tirotiro i ngā pane o te paetukutuku a tētahi atu?

Āe. Ka kitea ngā pane urupare e tetahi pūtirotiro, nō reira ka tirohia e te taputapu tetahi wāhitau tūmatanui—tōu ake wāhitau, tō tetahi kaiwhakataetae, tō tetahi kaimahi kirimana rānei. Kāore he urunga tūmau, he rēhitatanga rānei e hiahiatia ana.

He aha i rerekē ai ngā taitara o ngā whārangi rerekē o te pae?

Ka tāpirihia ētahi pane e te CDN, e te takawaenga rānei, ā, ka whakawhirinaki pea ngā ture ki te ara: kotahi te huinga o te whārangi kāinga, engari he rerekē ngā huinga o ngā kōnae /api/, o ngā kōnae tūmau rānei. Nō reira, tirohia te whārangi kāinga me ō whārangi taunga matua.

I tirohia e mātou te paetukutuku, engari kāore he tangata hei whakatika?

Ka whakakitea e tēnei taputapu kore utu ngā raruraru. Ka tātarihia e au te pūrongo, ka whakaritea ngā mea matua, ka whakatikahia: te arotake SEO, te tere ake, te tohu tāpiri, me te hekenga ki tētahi pae hou me te kore e ngaro ngā tūnga.