Development of a native content web system
Main Article Content
Abstract
The development of a custom system running on two servers requires a high degree of customization to update its various services. Consequently, a challenge arises when updating both servers: the main one, which can only be accessed via a local network and requires only updates to multimedia files and specific tables for its operation; and the secondary, which hosts the system that functions as the website and presents the user interface to the public. To implement this, two options were considered: the WordPress content management system or native PHP code. This project adopted the latter approach. In consequence of this decision, numerous activities (such as security, which fell under the responsibility of the Content Manager) were absorbed and placed under the developer's purview. To ensure compliance with security standards, it was decided to use Apache Firewall, which offers protection against common attacks.
Among the challenges to be resolved was the need to synchronize communication between both servers. To achieve this, the libssh2 library was utilized, which features functions for remote command execution, secure file transfer, authentication, and port forwarding for safe communications. This tool, which allows the execution of remote commands, bypassed the need to import and export the entire database from one server to another. It successfully enabled direct queries to the secondary server to update, insert, or delete specific records, as well as transfer multimedia files without overloading the servers with repeated and unnecessary processes. As a result, this communication technique allowed a fast connection between the servers, and also helped to protect the sensitive information on the main server, since it did not compromise access at any time. This proved to be a safe alternative for projects that require selective and secure synchronization.
Downloads
Article Details

This work is licensed under a Creative Commons Attribution-NonCommercial-NoDerivatives 4.0 International License.
Este trabajo tiene la licencia CC BY-NC-ND 4.0
References
Cabrera Laguapillo, M. S. y Larco Andrade, Y. C. (2018). Análisis de las técnicas de ocultación de código malicioso para evasión de sistemas de protección de usuario final y NIDS [trabajo de titulación de ingeniería, Escuela Politécnica Nacional]. Repositorio Institucional de la EPN. https://bibdigital.epn.edu.ec/handle/15000/19514
Caiza Chipantaci, E. M. (2025). Implementación de ciberseguridad a través de pfSense con SIEM [trabajo de integración curricular, Escuela Politécnica Nacional]. Repositorio Institucional de la EPN. https://bibdigital.epn.edu.ec/handle/15000/26460
Cajías, E. F. (2020). Evaluación de la eficiencia de ataques de tipo clickjacking y touchjacking en entornos controlados [trabajo de titulación de maestría, Escuela Politécnica Nacional]. Repositorio Institucional de la EPN. https://bibdigital.epn.edu.ec/handle/15000/21498
Effendi, M. R., Al-Falah, R. S., y Ismail, N. (2021, 19-20 de agosto). IoT-Based Battery Monitoring System in Solar Power Plants with Secure Copy Protocol (SCP) [ponencia]. 2021 7th International Conference on Wireless and Telematics (ICWT), Bandung, Indonesia. https://doi.org/10.1109/ICWT52862.2021.9678210 DOI: https://doi.org/10.1109/ICWT52862.2021.9678210
Lescano Andrade, B. L., y Quiros Chulca, C. A. (2021). Implementación de dos sniffers inalámbricos en un sistema Raspberry Pi para el componente práctico de comunicaciones inalámbricas de la ESFOT [trabajo de titulación de tecnólogo, Escuela Politécnica Nacional]. Repositorio Institucional EPN. https://bibdigital.epn.edu.ec/handle/15000/21812
González, Y., MC lenan, J., y Abrego, A. (2022). Los proyectos y las metodologías. Modelos de procesos: Ciclos de vida de desarrollo de software. Revista Semilla Científica, 3(3), 185–194. https://revistas.umecit.edu.pa/index.php/sc/article/view/1090
Pressman, R. S., & Maxim, B. R. (2021). Ingeniería de software: Un enfoque práctico (9a ed.). McGraw-Hill Interamericana.
Rangel Cano, L. L. (2021). Metodología para aplicar pruebas funcionales como parte de una auditoría de sistemas de información. Dirección General de Cómputo y de Tecnologías de Información y Comunicación, UNAM. https://www.red-tic.unam.mx/recursos/2021/metodologia-pruebas-funcionales.pdf
Rodríguez Gahona, G. (2020). Análisis comparativo de los modelos defensa en profundidad y MSPI, para la implementación de la seguridad informática en el sector privado del país [trabajo monográfico de especialización, Universidad Nacional Abierta y a Distancia]. https://repository.unad.edu.co/handle/10596/38717
Toapanta Rocha, J. C. (2023). Implementación de hardening en un sistema operativo de servidor Linux de base Red Hat [trabajo de integración curricular, Escuela Politécnica Nacional]. Repositorio Institucional de la EPN. https://bibdigital.epn.edu.ec/handle/15000/25203