What tool/service you use to protect your site against malware & hackers?

Discussion in 'Security' started by smartcompare, Jun 7, 2011.

  1. #1
    We have been recommended by Godaddy to use their service, godaddy website protection site scanner, has anyone used it before and are there any other useful suggestions on protecting your site against malware & hackers?
     
    smartcompare, Jun 7, 2011 IP
  2. stardust.x7

    stardust.x7 Active Member

    Messages:
    369
    Likes Received:
    3
    Best Answers:
    1
    Trophy Points:
    90
    #2
    Simple, we designed owned "Shell Scanner" from developers. It runs with cron job 2 times per week. So it automatically deleted all malware and shell files from any folders/subfolders under "/home". so not a single user get affected with malware attack :)

    Also Hardware level firewall and ddos protection enabled on all servers, so to hackers 'Bye Bye' :)
     
    stardust.x7, Jun 7, 2011 IP
  3. smartcompare

    smartcompare Peon

    Messages:
    32
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #3
    Can anyone use your 'shell scanner' service?
     
    smartcompare, Jun 8, 2011 IP
  4. nabil_kadimi

    nabil_kadimi Well-Known Member

    Messages:
    1,065
    Likes Received:
    69
    Best Answers:
    0
    Trophy Points:
    195
    #4
    * Always update your scripts as soon as a new version or security patch is released most importantly your OS and server software
    * If you have administrative rights (in other words not on a shared hosting) disable any unused serviced and close unnecessary opened ports
    * Do or hire someone for penetration testing
     
    nabil_kadimi, Jun 8, 2011 IP
  5. smartcompare

    smartcompare Peon

    Messages:
    32
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #5
    Hi Nabil_kadimi,

    Thanks for the advices and mind sharing where to hire someone for penetration testing?
     
    smartcompare, Jun 8, 2011 IP
  6. oskars

    oskars Active Member

    Messages:
    133
    Likes Received:
    1
    Best Answers:
    0
    Trophy Points:
    65
    #6
    thx nabil, answered my questions to :)
     
    oskars, Jun 16, 2011 IP
  7. phpSiteMinder

    phpSiteMinder Peon

    Messages:
    47
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #7
    I wrote phpSiteMinder and phpSiteScanner to to just that.

    phpSiteMinder will scan your website for backdoor/shell scripts and other code hackers usually inject into your files. It also backs up your files, so if your site is hacked (and you'll know because phpSiteMinder will email you and let you know what files have changed), you can quickly restore the original version, (or last clean version) of the file from the backup. It also can backup your databases too. And it does it all automatically so you don't have to worry about it. Also because it runs on your webserver, it can find all the files that external scanners don't know exist.

    phpSiteScanner is the stand alone scanning engine from phpSiteMinder that can be used to help you identify files that may have been infected if your site has been hacked.

    They will work on a PHP5 webserver. phpSiteMinder requires a MySQL database.
     
    Last edited: Jun 17, 2011
    phpSiteMinder, Jun 17, 2011 IP