How can I protect my website from hackers and viruses?

Discussion in 'Security' started by Fawfull, May 20, 2008.

  1. #1
    Hi

    I'd like to know what methods, services or software I could employ to bolster the security of my website. Particularly to protect against people attempting to hijack or hack the site.

    My site is rather controversial and may be a target to outside attacks. How can I protect myself?
     
    Fawfull, May 20, 2008 IP
  2. phplife

    phplife Peon

    Messages:
    36
    Likes Received:
    1
    Best Answers:
    0
    Trophy Points:
    0
    #2
    You need to go out and hire a reputable/with references penetration tester. Also for any scripts you have installed do a G. search for security alerts on your scripts.

    If you are on a shared host, not much you can do. If someone else on the shared host is vulnerable (because of some insecure script), so is your web site.

    phplife
     
    phplife, May 20, 2008 IP
  3. and_y

    and_y Active Member

    Messages:
    287
    Likes Received:
    4
    Best Answers:
    0
    Trophy Points:
    58
    #3
    Is your site on a dedicated server ?
     
    and_y, May 20, 2008 IP
  4. Phase

    Phase Active Member

    Messages:
    50
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    93
    #4
    Like phplife said if your site is on a shared hosting package (Dreamhost/HostGator/BlueHost/LunarPages/etc) and someone else runs software that is vulnerable, it could also harm yourwebsite.

    The best way to ensure your websites are safe is run your own server all to yourself (a "dedicated server") (can be expensive), make sure your httpd, and EVERYTHING on the machine is as secure as possible. You can hire a firm to help secure your machine as well, but I'd imagine something like that is a bit pricey too.

    Also seconding the recommendation phplife said: Google the software you use on your websites + security holes/exploits etc. For example "<Product>1.3.4 security vulnerabilities". Make sure your programs and software on your system are 100% up to date.

    If you are infact running on a shared hosting and it's not feasible to switch to your own dedicated server maybe shoot off an e-mail to your webhost asking about security.
     
    Phase, May 21, 2008 IP
  5. and_y

    and_y Active Member

    Messages:
    287
    Likes Received:
    4
    Best Answers:
    0
    Trophy Points:
    58
    #5
    You could think also of a VPS managed solution. There are a lot of cheap and excellent solutions
     
    and_y, May 21, 2008 IP