The shared-hosting tag has no wiki summary.
2
votes
3answers
125 views
MySQL database access prevention
I am doing a PHP website for a client who deals with third party financial information, and he is concerned about the developmers (me) having access to all the information, which is obviously a valid ...
3
votes
2answers
125 views
Defense against same origin attacks?
The Question:
How do I, as the victim, protect my site from being manipulated into doing something it's not supposed to, on a shared host? Same-Origin policy looks the other way. Most convenient ...
7
votes
2answers
84 views
Can other customers on shared hosting see requests from/to my site?
I installed a wiki on my shared webhosting (using Apache) account. This wiki is set to private (no read/edit/create rights for unauthorized users) and I'm the only one with an account.
The wiki ...
1
vote
3answers
105 views
FOUO on hosted sharepoint
I and few of my fellow employees were asking if it was okay to put FOUO (NSA issued) documents on SharePoint. The main justification was that its password protected (which is correct).
But its a ...
3
votes
2answers
144 views
Shared hosting mail server, Thunderbird and encryption
In spite of much searching on the internet, I can't really get an adequate understanding of this topic, perhaps because it combines multiple elements. As a result, I'm really worried about the state ...
3
votes
1answer
195 views
How to forward an specific FTP User to a Honeypot?
What I'm trying to do is to forward a specific FTP-User to a Honeypot, because the main server is for Shared Hosting and there's a lot of traffic, and I don't want to spend all the resources in ...
2
votes
2answers
180 views
Can the `system` function pose severe security threats on a shared hosting server?
I recently bought an account from a shared hosting company and I needed the php system function to be enabled for one of my projects.
So I created a ticket and asked them to enable it. This is what ...
2
votes
1answer
304 views
Can /etc/passwd file be accessed on a cpanel shared hosting account?
Given standard server hardening was performed, can the /etc/passwd be accessed by a shared hosting account by using PHP or Perl scripts which is executed from the public_html of the shared account?
1
vote
2answers
160 views
Am I a Hosting service provider in a sense of PCI-DSS SAQ D Appendix A?
My company provides web applications to third parties. We develop, host and manage the applications ourselves. All access that third parties get is the application itself and a separate ...
3
votes
2answers
83 views
Evaluating hosting providers for CC development environment
An organization that develops software that may be subject to security evaluations such as Common Criteria is looking to externalize part of its IT infrastructure, including critical components such ...
13
votes
3answers
850 views
How to keep a shared web hosting server secure?
What are the ways of keeping a shared LAMP server secure, assuming SSH access is available for every user?
Edit: I am mainly thinking of securing the server from the users themselves and between ...
