A type of service that allows a website to be made accessible via the internet. Web hosting can consist of storage space plus access to a website running a variety of technologies all the way up to fully dedicated servers provided by a third party.

learn more… | top users | synonyms

1
vote
2answers
66 views

How do web hosts know you own your domain?

Let's say I registered a domain on Namecheap and want DigitalOcean to be my host. This can be achieved by first setting the nameservers to DigitalOcean in Namecheap's backend: Second, we add some ...
3
votes
1answer
52 views

Secure Software Distribution: Is serving a file through HTTPS good enough?

I'd like to know whether HTTPS can be used as a secure means of software distribution. Concretely, can I put up a file on a server making it accessible through a public HTTPS URL and be sure that it ...
1
vote
2answers
90 views

What is the typical computer setup and hosting arrangement of malicious bots?

It's quite well known that if an attacker wanted to, they could spoof their IP address by using a proxy server or some other means. Whilst that's possible, whenever I perform a geo-location lookup ...
0
votes
1answer
37 views

Security of Data and Source Code in a 3rd Party Hosting Environment [closed]

What expectation should I have for the security of my data and codebase hosted with a 3rd party e.g. godaddy, or any other similar hosting provider. How common is it that some IT employee within the ...
2
votes
0answers
36 views

Cloned site with tricky HTTP_HOST

Another site has cloned mine. The site in question is netdna-cdn.com, and if you do a search on Google ("site:netdna-cdn.com") you will see it has cloned 100's if not 1000's of sites. So in times ...
1
vote
2answers
76 views

Will a wildcard SSL work properly for an A record subdomain pointing to another domain/website?

Client has wildcard SSL for his domain/subdomains. The application we are building is on one of our linux servers using one of our IP addresses and is contained within an account named ...
4
votes
2answers
244 views

How can bulletproof hosting be feasible?

Bulletproof Hosting Providers (BPHS) allow servers containing illegal porn, malware, organized (cyber)crime, major spam and all this on the WWW? If Spamhaus can block the entire subnet of such a ...
82
votes
8answers
12k views

If a provider sees the last 4 characters of my password, can they see it in full?

I have some domains/websites as well as emails with Bluehost. Every time I need support, they need the last 4 characters of my main password for the account. They cannot tell me how they store the ...
3
votes
3answers
316 views

How dangerous are outdated PHP versions for my clients?

In the company where I work (webhosting) our custoumers can choose the PHP version they want to use for their website. However, I have just realized that all of the offered PHP versions are outdated ...
2
votes
1answer
199 views

Creating a P2P hosted website

Is there a way to create a peer-to-peer hosted website securely: - Without Having a connection between the developer (host) of the website to the website? - Securing some information the site uses ...
-1
votes
0answers
38 views

Disable ftp://hostname for my website [closed]

I'm hosting a page and I'm having a problem. If I write ftp://myhostname, the browser asks for FTP username and password and I think this may be a security problem because it doesn't happen with other ...
1
vote
1answer
243 views

What are the biggest security risks/considerations for hosting your own private website? [closed]

I have a small personal website hosted through go-daddy. I also have an old machine sitting in my garage collecting dust. I know enough to make my old dumpy machine a Linux server for my tiny website ...
4
votes
1answer
123 views

Android app using FTP

I have done some android programming (self taught). I have started working on an app idea. The idea is pretty much that people with the app installed can post pictures/videos and text which can be ...
2
votes
3answers
115 views

Creating a website to test my scanner that I scripted

Hi I looked around on Google and this site for about the last hour and I couldn't find anything that gave a direct answer to my question. I changed the code around in a scanner that I used in the ...
5
votes
3answers
443 views

DoS by consuming all hosting trafic

Given a small website hosted on a small data plan, is it possible for someone to keep doing requesting for my website URL or just an image hosted on my website that will consume all my permitted ...
1
vote
2answers
283 views

Security of php code on webserver - obfuscate?

Can the php source of a web app be considered safe on the server, or is it worthwhile obfuscating the code to reduce the chance of successful theft? I think my question boils down to 'Is there a ...
3
votes
1answer
207 views

malware attack on my website may have started a SOCKS server - please advise [duplicate]

A website I do some volunteer work for was recently one of those affected by a wordpress plugin vulnerability. Following advice in the answer to this question, which contains details of the attack, ...
-4
votes
1answer
139 views

How to know from where the website is being operated? [closed]

I mean one can find their host server (from which the domain name is bought), but can we check who bought the domain and from where is that website is being hosted?
4
votes
1answer
165 views

Database Security

Would having the IP address and name of my database visible to the public be a security risk? I have hosting with godaddy, a shared hosting plan. When I connect to my DB, via MS-SQL-MS, I can see the ...
0
votes
2answers
77 views

Host an application on a virtualbox? [duplicate]

I want to host an application locally, but I was worried about security of my local files. I decided to 'encapsulate' the application using VirtualBox. Is that safe for my host OS (Windows)?
1
vote
1answer
123 views

Assuming malicious admin, what threats does a dedicated server mitigate vs VPS?

We host several dedicated servers and VPS instances containing sensitive data with 3rd party hosting providers. We understand we have to trust the providers as they have full control of the hardware, ...
3
votes
2answers
193 views

Is there any danger in allowing users to host PDF/RTF/DOC files on my web server?

If I were to allow users to host arbitrary PDF/RTF/DOC files on my server all under the same name, but with different query strings would there be anything to worry about? I've heard of PDF/RTF ...
2
votes
2answers
192 views

How risky is having sensitive files on webroot?

I understand that having anything sensitive under webroot is not smart; someone may be able to access it via url. However, I do not have a choice with my web host (iPage) as they limit my server space ...
3
votes
1answer
52 views

How to know 3rd party ads are safe?

It seems many sites use 3rd party flash ads, those ads could be design to attack user. Do those site know which ads are safe or not? Or they just transfer any ads to user browser? In general, how to ...
0
votes
1answer
250 views

How were hackers able to alter the text of my pages without a form or querystring?

I maintain a small site that runs old-fashioned classic ASP pages with an Access backend. Recently, the site got hacked. The attacker managed to add a large quantity of code to the index.asp page. ...
0
votes
2answers
123 views

How to securely serve client-side-only web content to mobile with convenience?

For a cryptocurrency client implementation, I am serving a single page webapp to mobile clients. It is a client-side-only page. I would like to serve this page to clients, but I fear tampering by ...
0
votes
2answers
213 views

Attack surface for a site that hosts only static content HTML and images?

What kind of attack surface is there for a site that only hosts static content: HTML, images, CSS? How can sites like this be successfully penetrated?
1
vote
1answer
273 views

'Ghost' access to a php file on a web server

I'm developing a personal project and one part of the project is a php website, hosted at hostinger as a free plan, that allow clients to ping to it and stores the WAN IP and the NAT IP of them. ...
0
votes
3answers
698 views

What security issues will I face with outsourced VPS server?

Our small comapny wants to launch a paid service, hosted on the outsourced VPS server. The obvious risk is that the machine is physically not in our office and that possibly the database could be ...
2
votes
2answers
714 views

Is it a real security benefit if a host uses static IP Addresses for authentication?

As my knowledge about information security is not THAT good and Google did not give me a satisfactory answer I would like to ask the community here: I am working for a company offering online ...
1
vote
2answers
432 views

What are these long www bitnik URL?

Noticed it here https://twitter.com/wikileaks/status/446263047812702208 wwwwwwwwwwwwwwwwwwwwww.bitnik.org Is this some security feature?
0
votes
2answers
45 views

How likely would /var/mail be encrypted in a paid host? [closed]

I pay for a very basic web hosting plan, which includes a personal email address. Would the sysadmin of said host be able to read the content of my messages? How likely would my personal mail folder ...
0
votes
1answer
476 views

Virtual private server security [closed]

I want to move from a shared hosting to VPS. I never used VPS or dedicated server, so I wanted to know if there are some security precautions that I should have in mind. Say, I create a ftp account ...
1
vote
2answers
117 views

Preventing interaction among web application on a shared hosting account

I have multiple web application installed in separeted directories in a shared hosting account. My worry is if one application get hacked, attacker can use it to attack other applications too. So, My ...
2
votes
2answers
1k views

What is the ultimate goal of hacking a webserver? [closed]

Recently I noticed a lot of traffic generated by automated bots that were checking for vulnerabilities in my web server. They were mainly looking for ways to hack into plesk/wordpress which I don't ...
-1
votes
1answer
343 views

Location of server affects the speed of page loading? [closed]

i live in a country but i make a website for another country's users. The web hosting company has server in both of the countries. So where should i buy? Does it affects where the server is depending ...
-1
votes
1answer
857 views

The Pirate Bay's new Hosting Architecture [closed]

I read this article a moment ago: http://www.geek.com/news/the-pirate-bay-is-now-hosted-anonymously-in-the-cloud-1522725/ But it was very light on details. Is an architecture as described in this ...
1
vote
1answer
92 views

Securing WebHosting Shell Access

If I provide SSH access to users who has paid webhosting service, what security measures should be applied ? What I can think of: SSH keys RSA of 4096 size (shall be secure for a while) Apache ...
3
votes
3answers
3k views

What risks are involved in exposing our home computers over the public internet?

I'm currently running a webserver from home accessible on the public internet via a static IP. What kind of risks are there in doing so? From what I understand, the setup will not allow connections ...
0
votes
1answer
285 views

Website Link Spam Hacking Protection [closed]

I've recently been employed as a junior web and software developer for a small company, and noticed that their Home page has had links to completely unrelated sites added like spam to the index.html ...
-5
votes
2answers
133 views

Analysing server (VPS) before hosting a government website [closed]

Hosting a government website would definitely increase reputation, but it would also bring higher chances of the hosting server getting attacked by DDoS attacks. It's a cPanel based VPS. What basic ...
-3
votes
1answer
204 views

Using Old version of mysql connector's security issue [closed]

I'm using asp.net 4.0 and MySQL. Last week my hosting firm changed security level of from full to medium. MySQL connector doesn't work correctly anymore. For this reason I'm using old version of ...
-1
votes
2answers
239 views

Interpreted VS Compiled web frameworks and trust

OK here is a big question. Interpreted languages have many advantages over the compiled languages when it comes to web application. But what is the ftp server is hacked or the web hosting company ...
4
votes
1answer
138 views

How to secure application VM?

This question is derived from my previous question on Isolating Web application where two approaches were recommended. Apache Chroot Jail Isolation through Virtualization My question is if one of ...
3
votes
1answer
660 views

Does compromise of one cPanel / WHM account on a server mean the other accounts are at risk?

I have created multiple cpanel accounts using my server WHM panel. As of now each domain has separate cpanel in my server. If one of my cpanel (domain) hacked, does that mean other cpanel are hacked ...
16
votes
6answers
7k views

Is showing your IP address in the URL a bad practice?

Someone told me that showing your IP address in a URL (like hxxp://45.67.134.34/default.html) is easier to hack. Is that true? I could trace any domain name and get its IP number as well.
0
votes
2answers
1k views

“Premium SSL” vs “Stanard SSL” certificates - Any reason why I would want a “Premium SSL”? [duplicate]

Possible Duplicate: What are the advantages of EV Certificate? besides the green URL bar and free security scan and whatnot. Our website does NOT accept any personal info other than email ...
4
votes
3answers
431 views

Completely mimimise the possibility of my web hosting account being hacked

I've just moved web hosting providers and I want a fresh, secure start. To a certain extent, I don't mind what I have to do I'm just fed up my account being hacked or infected. I just wondered how to ...
3
votes
3answers
224 views

Monitoring for security threats

I host and maintain several websites. The users pay to have their sites maintained and secured. However, with the amount of web applications like joolma, wordpress, ect... and their plugins, I need a ...
5
votes
1answer
75 views

Should different web apps running on VDS each have their own user account?

I deployed my second rails app on my VDS with capistrano. Should I configure that application server to run as a different user, or the same as the first application? If I run applications as ...