May 24th, 2002, 03:53 AM
I Need Advice
I manage 2 websites. One of which is on free webspace. Here if you want to check out the free one.
The other is a professional business site and I need some tips to keep the site secure. Here for the professional one. Thanks for any help.
May 24th, 2002, 02:09 PM
In what way do you wish to secure them? The majority of security plans require server-side protection, and I doubt that you have access to the server for your free site.
Provide more info and I'll do my best to help you out.
May 25th, 2002, 12:13 AM
Hacker protection. Defacing protection. Secure transmissions (ie email, sensitive info, etc.). Just that kind of stuff.
May 25th, 2002, 10:24 AM
Do you have access to the server itself (i.e. you have dedicated hosting) or can you get your hosting company to switch on services such as SSH? All the stuff you want to do requires configuration on the server-side.
May 25th, 2002, 11:14 AM
May 25th, 2002, 11:24 AM
May 25th, 2002, 03:37 PM
If you want your site secure against defacement, make sure you use a server you have complete control over,
take measures to prevent it being attacked by "skript kiddies" - i.e. keep it patched, turn off all unnecessary services, colo it somewhere with decent physical
security and then make sure any applications you run (i.e. server-side) are written in a secure fashion.
Don't trust third parties - ensure that your staff and partners have only as much access as necessary and audit their actions in a reasonable way. Ensure your policy permits only strong passwords (remember attacks are quite likely to come from within your organisation or a partner's). Lock out accounts when they're no longer needed.
also bear in mind that you should still have a disaster recovery plan
May 25th, 2002, 09:31 PM
Don't have your webserver running at root privilidges. If you are (which you probably aren't), I would advise to to change it to a severly permiisions-impaired luser acccount.
May 25th, 2002, 09:33 PM
I forgot to add: Nice website!
May 27th, 2002, 01:05 PM
your creating business sites in cool page????
and people pay you to do this?
if so how much (if you don't mind me asking)
/me gets ready to alter his web-design charges....hand coded html/dhtml and flash might be worth a bit more now