How can we save our sites from being hacked?

Joined
Oct 23, 2018
Messages
6
Best answers
0
Ratings
1
Points
1
#1
Is really hard these days to protect a website with confidential information. There are a lot of hackers targeting websites today. I would really love to know the best steps to take in protecting a website from being hacked. It would be really be helpful.
 
Joined
Dec 20, 2017
Messages
30
Best answers
0
Ratings
12 1
Points
8
#2
There are many things to do but for me i do simple few steps to make website
1- Choose hosting from such provider which has already built-in DDos Protection at back-end
2- Website should be updated with each plugin and theme
3- never share any such files content to anyone ever
4- always scan your website file in a month to find any malware code injection
5- always take backup of files and sql each 1st of the month and upload it to your google or any other drive

hope these steps will make you comfortable to run website smoothly - if you ever need such type of hosting do let me know in person ;)
 
Joined
Oct 26, 2018
Messages
49
Best answers
0
Ratings
17 1
Points
8
#3
That's a great question! I think the best thing to do is to be proactive and not reactive.

1) Make sure your software stays up to date,
2) Use strong passwords (and different passwords throughout)
3) SSL Certificate
4) Use a Firewall to scan and block threats. They happen all the time unfortunately.
4) Consider a service that scans for malware regularly and removes it for you.
5) If you haven't already, make sure you're not using PHP 5.6 or even PHP 7.0. Both of these are EOL (End of Life) in December.
 
Joined
Oct 26, 2018
Messages
49
Best answers
0
Ratings
17 1
Points
8
#5
Right now, we are using StackPath (CDN and FIrewall). Others have had good success with CloudFlare as well.
 
Joined
Oct 26, 2018
Messages
49
Best answers
0
Ratings
17 1
Points
8
#7
Correct, it is not a free service. They do offer a free 30 day trial though. I am not aware of any free firewalls or CDN services that are reliable.
 

AlbaHost

Well-known member
Joined
Jan 18, 2017
Messages
395
Best answers
1
Ratings
109 6
Points
43
#10
Use cphulk to block most countries like China etc, since 70% of attacks cames from this country. Use Mod security to protect injections, fail2ban or csf lots of shits online to help and secure your server.
 
Last edited:
Joined
Jan 19, 2013
Messages
68
Best answers
1
Ratings
17
Points
8
#11
Nowdays, nothing is secure over internet/network. But we can prevent attacks from unwanted connection. We can install csf firewall on server for better security. We have to set correct permissions for files/dirs to restrict access from other users. For example, When we have wordpress website in that case install 'Wordfence' plugin for security.
 
Joined
Apr 18, 2017
Messages
46
Best answers
1
Ratings
14 1
Points
8
#12
Hello, Gabriellovee! It's useful to take a few simple thoughts for a spin: - I agree with imRelease - choose a secure hosting; - Don't use FTP, it's better to go with SFTP or SCP. For example, you can work with your server with WinSCP. - Change passwords regularly: at least once a month, and always after you have given access to your website to third parties (developers or SEO you work with) - Update the CMS your websites work on: install patches and upgrade to the latest version. - Don't use any nulled software. - Back up your server to a local computer. Back it up as a rule! - Use anti-virus/malware software and manual analysis with find / grep. - Set up a firewall (for example, iptables) if you don't use shared a hosting because shared hosting provider already has to set up a firewall by default.
 

bountysite

Corporate Member
Corporate Member
Joined
Oct 11, 2017
Messages
91
Best answers
1
Ratings
43
Points
18
#13
- Make sure you have latest version CMS and plugins (this will filter out most of common attacks). Update regularly
- Dont use weak and common passwords. Use password manager like lastpass, keepassx
- Keep backup of your website. Get notified on file changes
- Firewall FTP/SFTP ports, if you can
- Never use FTP. Use FTPS.
 
Latest Threads
Replies
1
Views
12
  • Deleted
  • Deleted by fwh
Replies
0
Views
1
  • Deleted
  • Deleted by fwh
Replies
0
Views
1
  • Deleted
  • Deleted by fwh
Replies
0
Views
1
  • Deleted
  • Deleted by fwh
Replies
0
Views
1
Recommended Threads

Latest postsNew threads

Latest Hosting OffersNew Reviews

Sponsors

Latest Blog ArticlesMost Viewed Threads

Tag Cloud

You are using an out of date browser. It may not display this or other websites correctly.
You should upgrade or use an alternative browser.

Top