About site security

Started by Kevin56, Jul 10, 2022, 10:38 PM

Previous topic - Next topic

Kevin56Topic starter

Hello, I am new to this and would like to share my current knowledge and past experience. From my understanding, a domain is the name of a website entered at the top of a browser and can be purchased from accredited sellers.
but, I am unsure about mail in relation to domains. Hosting refers to where a site is stored, but I am not familiar with it. I recall using ftp to upload my site and only needing an index.html file, but realize hosting may require additional packages like php, apache, and mysql.

Are these packages installed by me or included with hosting? Also, if there is no webpage, should I configure an error page on the hosting rather than the site? Regarding MySQL databases, how can I secure them from hаcks and set different access rights for users and constant databases? I am mainly concerned with preventing unauthorized data changes or deletions.
 Can you recommend any beginner-friendly resources on types of hаcks and protection methods?
  •  

ShreeVaghani

1. Virtual hosting is a cost-effective option where everything is set up and ready to go, but may lack performance as resources are shared among many other sites and there may be limited customizations available.
2. Dedicated server provides high performance and complete resource control, but is the most expensive option since a server is either purchased or rented by the host.
3. VPS/VDS is similar to dedicated servers, but with a virtual machine instead, making it more affordable than dedicated servers or even shared hosting. However, performance can vary depending on various factors.
4. Cloud services like AWS, Azure, and Heroku offer flexibility by allowing users to pick and choose which services they need for their website or application.

The main types of attacks include SQL injection, XSS, and file upload vulnerabilities such as uploading PHP code instead of an image.
  •  

WAO

To protect your website from hаckers and malicious bots, choose a hosting provider that uses a Web Application Firewall (WAF) for active network monitoring. The WAF will prevent hаckers from exploiting vulnerabilities using SQL injection or cross-site XSS scripting and also serves as a great DDoS attack protection tool.
Find a secure web hosting provider that regularly scans servers for malware and sends scanning reports to customers. If your site becomes affected by hаckers or software, the hosting provider should help identify and eliminate vulnerabilities.

Using HTTPS is also crucial for encrypting and ensuring the integrity of data on the Internet. It protects user data from hаckers, including sensitive information like passwords and bank card data. Obtain an SSL certificate to transfer your website to HTTPS and update it regularly with the latest SSL version and modern encryption.

To reduce the risks of hаcking administrator accounts, only give access to trusted persons and use strong passwords with two-factor authentication. Adjust the settings of your CMS to protect against creating new malware and configure user management, file access rights, and comment settings.

Regularly updating your software for operating systems, server software, CMS, plugins, and other products improves security and eliminates vulnerabilities. Get rid of old software that leaves hаckers loopholes to access your system.

Creating backups is also important to mitigate the consequences of an attack on your website and its data. Many web hosting providers have automatic backups included in plans but may have limited data copying. Manual backups can be done using the built-in backup function of cPanel.
  •  

Kross32

If you don't know much about site security, the easiest option is to use reliable checking programs (like Google Safe Browsing). You can easily find these on the Internet, just check the information about them first, read real reviews.
  •