Hi friends, I have heared that through proxy, any one can hack any website.. Is it possible.??? Actually i m not in the field of programming, or better to say not technically sound.. I am under hudge presure. I have a doubt about my sites. If some will hike those. As i am not technically sound, so tell me the truth.. Is it possibe? And if possible then how to prevent it? Looking for experts suggestions. thanks in advance w.s
Short answer: No. A proxy is used to hide one's IP behind another IP (the proxy IP). So if someone connects to your website, you won't be able to obtain their actual IP directly. There's also the dictionary definition of a proxy: A person authorized to act for another; an agent or substitute.
Alternate short answer: yes. Using a proxy does not enable hacking your website. As Selfkill notes, the proxy is intended to hide the actual IP address of the hacker. As he implies, ordinary users access websites via proxies for a variety of reasons. On the other hand, hackers may also use proxies to access your website and make it harder for you track them done after they have defaced and/or hacked it. The net result is there is no reason to try to figure out if someone arrives at your site via a proxy and try to ban them. Most often, they are legitimate. Your biggest problem is that you are "not technically sound". There are new vulnerabilities uncovered nearly every day affecting the full spectrum of closed and open source programs and/or scripts in use on the internet. It is your responsibility, as a website administrator, to learn enough to mitigate against such threats. Not just to protect your own site. But, to protect those around you. You need to stay on top of security threads at forums for the scripts that you use on your sites and implement all security patches. If you use PHP, you can get proactive by installing the Suhosin patch. It is a most helpful security addition . . . though not a cure-all.
Other Alternate short answer: No. Proxies alone will not allow or enable a person or set of people to "hack" your website. Proxies can only somewhat cover your tracks if they do hack or attempt to hack your site. Even in this case - proxies leave a trail. Everything leaves a trail... just follow the logs If they are determined enough they will get through - so it's best just to protect yourself the best that you can. If you get ddos'd by 1000 edu's... no webserver(s) can withstand it.
I called my hosting (h__gaitor.com) company just last week to ask them about hacking..the answer was "If someone want's to and is determined on hacking a specific site, there is almost nothing you can do, all you can do is put up obstacles to make it time consuming", that way they can maybe get discouraged and move on to the next poor soul. :-/
much like the "club" "car alarm" "lo Jack" or any other theft device if the thief wants your car they will take it. Same would apply to websites if they really want to and have the balls to hack it then they will.