Portal Home > Knowledgebase > Articles Database > Server Security
Server Security
Posted by leslieparba, 04-10-2012, 02:52 AM |
Hi Guys,
We are a small company that hosted few websites. I would like to know if their are any we could do in our server to tighten the security.
I have no Idea any suggestion you could share?
|
Posted by dale, 04-10-2012, 03:26 AM |
You could consider hiring someone who knows about security.
|
Posted by leslieparba, 04-10-2012, 03:50 AM |
Hahaha yeah right. We have thought that but we are just small or maybe soon we should. unfortunately, now I am just looking for an Idea that might help us to put even little. thanks anyway.
|
Posted by net, 04-10-2012, 04:06 AM |
Moved > Hosting Security and Technology.
|
Posted by dale, 04-10-2012, 04:10 AM |
If you are running your own server and managing your own sites, you could read up on server hardening, security, and/or related topics, and then start from there. WHT has a forum dedicated to security.
But security is a job that requires experience and expertise. Unless your sites are completely static, they usually need on-going management. You could hire someone, even short term, to make sure your server is okay, to give you an overview of what you need to work on, to focus on, etc. -- or even just to help you evaluate how critical your sites are and if you need to hire someone long term.
|
Posted by leslieparba, 04-10-2012, 04:16 AM |
I agreed.. Thank you.. I will check the link you post.
|
Posted by EthernetServers, 04-10-2012, 05:48 PM |
Firstly, I'm assuming you have root access to the server. Is this the case?
|
Posted by Gabe_GoDaddy, 04-11-2012, 10:06 AM |
Hey leslieparba,
I agree with dale, hiring a full time security professional is the best way when it is in your budget. In the meantime, educate yourself as much as you can, and leverage reputable security services that are currently available. Whatever service you use; they should scan for malicious links, look for XSS and perform a daily pass/fail check for the security of your site.
Good luck!
|
Posted by Narthex-Nick, 04-11-2012, 10:09 AM |
Most of the security excersizes has to be executed and frequently updated server-wide. As a shared hosting client, there sure are a few things that you can do.
1. Ensure you do not use any outdated plugin/scripts.
2. Ensure you check for XSS and RFI vulnerabilities.
3. If you spot an un-identified .php file, make sure you report it to your host.
4. Ask your host for the steps they are taking to ensure security.
|
Posted by Patrick, 04-11-2012, 10:57 AM |
Most hosts won't release a detailed step by step guide of what they are doing to keep things secure. Outside of the basics and most obvious tasks, it's never a good idea to give people your tell all about the security setup of your infrastructure.
|
Add to Favourites Print this Article
Also Read