A type of service that allows a website to be made accessible via the internet. Web hosting can consist of storage space plus access to a website running a variety of technologies all the way up to fully dedicated servers provided by a third party.

learn more… | top users | synonyms

1
vote
1answer
35 views

Is internal or external hosting more secure? [on hold]

I have been looking for a while to find out the number of malicious attacks that have been successful against internal vs externally hosted web and SQL solutions. When I say internal, I mean the ...
0
votes
0answers
45 views

Managed hosting with PCI SAQ D for Service Providers compliance

We have some hotel websites on our current managed hosting that link via URL redirect to a PCI Compliant third party booking engine hosted elsewhere. We do no more than pass date of arrival and number ...
0
votes
2answers
57 views

Security scan with or without IP whitelisting in the firewall and isn't that introducing a weak point?

In case of an automated security scan is it more desirable to get the scanner IP addresses whitelisted in order to possibly find vulnerabilities behind the firewall, or to scan in front of/against the ...
1
vote
1answer
51 views

VPN / VPS and IP logs

Here's the situation: 1) I rent a VPS at a hoster and install VPN on it. 2) Completely disable all logs. Those logs that can not be disabled - permanently delete. 3) I connect to my VPS via VPN (...
0
votes
0answers
47 views

How to block ftp password guessers in shared hosting?

Is this also possible for shared hosting to: 1.use a web software to block password guessing attempts 2.change ftp port 3.locking down access to specific source IP addresses If none of above is ...
1
vote
1answer
41 views

Are any container solutions secure enough to run fully un-trusted code, particularly as a VPS service?

A number of answers here on this Stack Exchange argue that containers are inherently insecure and one should never run untrusted code in a container, let alone run a container built entirely by ...
1
vote
2answers
91 views

How do web hosts know you own your domain?

Let's say I registered a domain on Namecheap and want DigitalOcean to be my host. This can be achieved by first setting the nameservers to DigitalOcean in Namecheap's backend: Second, we add some ...
3
votes
1answer
54 views

Secure Software Distribution: Is serving a file through HTTPS good enough?

I'd like to know whether HTTPS can be used as a secure means of software distribution. Concretely, can I put up a file on a server making it accessible through a public HTTPS URL and be sure that it ...
1
vote
2answers
96 views

What is the typical computer setup and hosting arrangement of malicious bots?

It's quite well known that if an attacker wanted to, they could spoof their IP address by using a proxy server or some other means. Whilst that's possible, whenever I perform a geo-location lookup ...
0
votes
1answer
55 views

Security of Data and Source Code in a 3rd Party Hosting Environment [closed]

What expectation should I have for the security of my data and codebase hosted with a 3rd party e.g. godaddy, or any other similar hosting provider. How common is it that some IT employee within the ...
2
votes
0answers
44 views

Cloned site with tricky HTTP_HOST

Another site has cloned mine. The site in question is netdna-cdn.com, and if you do a search on Google ("site:netdna-cdn.com") you will see it has cloned 100's if not 1000's of sites. So in times ...
1
vote
2answers
219 views

Will a wildcard SSL work properly for an A record subdomain pointing to another domain/website?

Client has wildcard SSL for his domain/subdomains. The application we are building is on one of our linux servers using one of our IP addresses and is contained within an account named www.somedomain....
5
votes
2answers
389 views

How can bulletproof hosting be feasible?

Bulletproof Hosting Providers (BPHS) allow servers containing illegal porn, malware, organized (cyber)crime, major spam and all this on the WWW? If Spamhaus can block the entire subnet of such a ...
85
votes
8answers
18k views

If a provider sees the last 4 characters of my password, can they see it in full?

I have some domains/websites as well as emails with Bluehost. Every time I need support, they need the last 4 characters of my main password for the account. They cannot tell me how they store the ...
2
votes
3answers
586 views

How dangerous are outdated PHP versions for my clients?

In the company where I work (webhosting) our custoumers can choose the PHP version they want to use for their website. However, I have just realized that all of the offered PHP versions are outdated ...
2
votes
1answer
398 views

Creating a P2P hosted website

Is there a way to create a peer-to-peer hosted website securely: - Without Having a connection between the developer (host) of the website to the website? - Securing some information the site uses ...
-1
votes
0answers
40 views

Disable ftp://hostname for my website [closed]

I'm hosting a page and I'm having a problem. If I write ftp://myhostname, the browser asks for FTP username and password and I think this may be a security problem because it doesn't happen with other ...
1
vote
1answer
295 views

What are the biggest security risks/considerations for hosting your own private website? [closed]

I have a small personal website hosted through go-daddy. I also have an old machine sitting in my garage collecting dust. I know enough to make my old dumpy machine a Linux server for my tiny website ...
4
votes
1answer
136 views

Android app using FTP

I have done some android programming (self taught). I have started working on an app idea. The idea is pretty much that people with the app installed can post pictures/videos and text which can be ...
2
votes
3answers
124 views

Creating a website to test my scanner that I scripted

Hi I looked around on Google and this site for about the last hour and I couldn't find anything that gave a direct answer to my question. I changed the code around in a scanner that I used in the past,...
5
votes
3answers
451 views

DoS by consuming all hosting trafic

Given a small website hosted on a small data plan, is it possible for someone to keep doing requesting for my website URL or just an image hosted on my website that will consume all my permitted ...
0
votes
2answers
328 views

Security of php code on webserver - obfuscate?

Can the php source of a web app be considered safe on the server, or is it worthwhile obfuscating the code to reduce the chance of successful theft? I think my question boils down to 'Is there a ...
3
votes
1answer
227 views

malware attack on my website may have started a SOCKS server - please advise [duplicate]

A website I do some volunteer work for was recently one of those affected by a wordpress plugin vulnerability. Following advice in the answer to this question, which contains details of the attack, ...
-4
votes
1answer
154 views

How to know from where the website is being operated? [closed]

I mean one can find their host server (from which the domain name is bought), but can we check who bought the domain and from where is that website is being hosted?
4
votes
1answer
212 views

Database Security

Would having the IP address and name of my database visible to the public be a security risk? I have hosting with godaddy, a shared hosting plan. When I connect to my DB, via MS-SQL-MS, I can see the ...
0
votes
2answers
79 views

Host an application on a virtualbox? [duplicate]

I want to host an application locally, but I was worried about security of my local files. I decided to 'encapsulate' the application using VirtualBox. Is that safe for my host OS (Windows)?
1
vote
1answer
130 views

Assuming malicious admin, what threats does a dedicated server mitigate vs VPS?

We host several dedicated servers and VPS instances containing sensitive data with 3rd party hosting providers. We understand we have to trust the providers as they have full control of the hardware, ...
3
votes
2answers
210 views

Is there any danger in allowing users to host PDF/RTF/DOC files on my web server?

If I were to allow users to host arbitrary PDF/RTF/DOC files on my server all under the same name, but with different query strings would there be anything to worry about? I've heard of PDF/RTF ...
2
votes
2answers
239 views

How risky is having sensitive files on webroot?

I understand that having anything sensitive under webroot is not smart; someone may be able to access it via url. However, I do not have a choice with my web host (iPage) as they limit my server space ...
3
votes
1answer
53 views

How to know 3rd party ads are safe?

It seems many sites use 3rd party flash ads, those ads could be design to attack user. Do those site know which ads are safe or not? Or they just transfer any ads to user browser? In general, how to ...
0
votes
1answer
275 views

How were hackers able to alter the text of my pages without a form or querystring?

I maintain a small site that runs old-fashioned classic ASP pages with an Access backend. Recently, the site got hacked. The attacker managed to add a large quantity of code to the index.asp page. ...
0
votes
2answers
135 views

How to securely serve client-side-only web content to mobile with convenience?

For a cryptocurrency client implementation, I am serving a single page webapp to mobile clients. It is a client-side-only page. I would like to serve this page to clients, but I fear tampering by ...
1
vote
2answers
283 views

Attack surface for a site that hosts only static content HTML and images?

What kind of attack surface is there for a site that only hosts static content: HTML, images, CSS? How can sites like this be successfully penetrated?
1
vote
1answer
301 views

'Ghost' access to a php file on a web server

I'm developing a personal project and one part of the project is a php website, hosted at hostinger as a free plan, that allow clients to ping to it and stores the WAN IP and the NAT IP of them. ...
0
votes
3answers
881 views

What security issues will I face with outsourced VPS server?

Our small comapny wants to launch a paid service, hosted on the outsourced VPS server. The obvious risk is that the machine is physically not in our office and that possibly the database could be ...
2
votes
2answers
828 views

Is it a real security benefit if a host uses static IP Addresses for authentication?

As my knowledge about information security is not THAT good and Google did not give me a satisfactory answer I would like to ask the community here: I am working for a company offering online ...
1
vote
2answers
449 views

What are these long www bitnik URL?

Noticed it here https://twitter.com/wikileaks/status/446263047812702208 wwwwwwwwwwwwwwwwwwwwww.bitnik.org Is this some security feature?
0
votes
2answers
48 views

How likely would /var/mail be encrypted in a paid host? [closed]

I pay for a very basic web hosting plan, which includes a personal email address. Would the sysadmin of said host be able to read the content of my messages? How likely would my personal mail folder ...
0
votes
1answer
519 views

Virtual private server security [closed]

I want to move from a shared hosting to VPS. I never used VPS or dedicated server, so I wanted to know if there are some security precautions that I should have in mind. Say, I create a ftp account or,...
1
vote
2answers
120 views

Preventing interaction among web application on a shared hosting account

I have multiple web application installed in separeted directories in a shared hosting account. My worry is if one application get hacked, attacker can use it to attack other applications too. So, My ...
2
votes
2answers
1k views

What is the ultimate goal of hacking a webserver? [closed]

Recently I noticed a lot of traffic generated by automated bots that were checking for vulnerabilities in my web server. They were mainly looking for ways to hack into plesk/wordpress which I don't ...
-1
votes
1answer
363 views

Location of server affects the speed of page loading? [closed]

i live in a country but i make a website for another country's users. The web hosting company has server in both of the countries. So where should i buy? Does it affects where the server is depending ...
-1
votes
1answer
914 views

The Pirate Bay's new Hosting Architecture [closed]

I read this article a moment ago: http://www.geek.com/news/the-pirate-bay-is-now-hosted-anonymously-in-the-cloud-1522725/ But it was very light on details. Is an architecture as described in this ...
1
vote
1answer
95 views

Securing WebHosting Shell Access

If I provide SSH access to users who has paid webhosting service, what security measures should be applied ? What I can think of: SSH keys RSA of 4096 size (shall be secure for a while) Apache MPM-...
5
votes
3answers
3k views

What risks are involved in exposing our home computers over the public internet?

I'm currently running a webserver from home accessible on the public internet via a static IP. What kind of risks are there in doing so? From what I understand, the setup will not allow connections ...
0
votes
1answer
295 views

Website Link Spam Hacking Protection [closed]

I've recently been employed as a junior web and software developer for a small company, and noticed that their Home page has had links to completely unrelated sites added like spam to the index.html ...
-5
votes
2answers
138 views

Analysing server (VPS) before hosting a government website [closed]

Hosting a government website would definitely increase reputation, but it would also bring higher chances of the hosting server getting attacked by DDoS attacks. It's a cPanel based VPS. What basic ...
-3
votes
1answer
217 views

Using Old version of mysql connector's security issue [closed]

I'm using asp.net 4.0 and MySQL. Last week my hosting firm changed security level of from full to medium. MySQL connector doesn't work correctly anymore. For this reason I'm using old version of ADO....
-1
votes
2answers
255 views

Interpreted VS Compiled web frameworks and trust

OK here is a big question. Interpreted languages have many advantages over the compiled languages when it comes to web application. But what is the ftp server is hacked or the web hosting company ...
4
votes
1answer
144 views

How to secure application VM?

This question is derived from my previous question on Isolating Web application where two approaches were recommended. Apache Chroot Jail Isolation through Virtualization My question is if one of ...