The web-hosting tag has no wiki summary.
-3
votes
0answers
31 views
User entered Javascript security implications [duplicate]
I'm creating a web site that lets people create their own site using a subdomain. Are there any security implications by letting people add custom javascript to their pages? If so, which ones? XSS? ...
3
votes
1answer
53 views
Does compromise of one cPanel / WHM account on a server mean the other accounts are at risk?
I have created multiple cpanel accounts using my server WHM panel.
As of now each domain has separate cpanel in my server.
If one of my cpanel (domain) hacked, does that mean other cpanel are hacked ...
-2
votes
0answers
30 views
Sucuri - False Positive with Domain Web Forwarding? [closed]
Similar to the following question:
Sucuri giving false positive with their free online scanner because of an .htaccess RewriteRule
Client has the following domain:
buildingflathead.com
which ...
0
votes
2answers
144 views
“Premium SSL” vs “Stanard SSL” certificates - Any reason why I would want a “Premium SSL”? [duplicate]
Possible Duplicate:
What are the advantages of EV Certificate?
besides the green URL bar and free security scan and whatnot.
Our website does NOT accept any personal info other than email ...
4
votes
3answers
206 views
Completely mimimise the possibility of my web hosting account being hacked
I've just moved web hosting providers and I want a fresh, secure start. To a certain extent, I don't mind what I have to do I'm just fed up my account being hacked or infected. I just wondered how to ...
-3
votes
2answers
90 views
How To Secure running Wordpress Sites? [closed]
I am working in web hosting company so my job is to fix clients problem, one of the biggest problem we are facing right now is that our only word press customer site got hacked 'not one all of them', ...
3
votes
3answers
183 views
Monitoring for security threats
I host and maintain several websites. The users pay to have their sites maintained and secured. However, with the amount of web applications like joolma, wordpress, ect... and their plugins, I need a ...
5
votes
1answer
46 views
Should different web apps running on VDS each have their own user account?
I deployed my second rails app on my VDS with capistrano. Should I configure that application server to run as a different user, or the same as the first application?
If I run applications as ...
1
vote
1answer
179 views
Securely tell the user his password in new WHM/Cpanel account creation?
I understand it's not safe to send passwords via email but when accounts are created via WHM/Cpanel, I have to let the user know what password I created for them. How can I relay the password safely?
2
votes
1answer
304 views
Can /etc/passwd file be accessed on a cpanel shared hosting account?
Given standard server hardening was performed, can the /etc/passwd be accessed by a shared hosting account by using PHP or Perl scripts which is executed from the public_html of the shared account?
-3
votes
2answers
240 views
How is banking softwares used over the internet [closed]
I'm developing a banking software using php and that will be used over the internet. What are some of the security steps I should take in db design, programming, hosting...? thanks.
3
votes
2answers
198 views
Risks of serving untrusted content under HTTP Content-Type: text/plain?
Am I gonna run into XSS attacks by doing this, or will a file download be prompted?
Are there security problems that would rise in a modern browser?
2
votes
3answers
786 views
Do I have a virus on my hosted site?
A few weeks ago I hired an outsourcer from India to build for me a very simple PHP site.
I bought PHP hosting and a domain name, and I gave him all the credentials together with the specification of ...
3
votes
3answers
256 views
Dedicated Server in Cloud Environment - SSL Remote Login vs Dedicated VPN
Thanks for taking your time to look into this question.
Background
I have my website hosted in a dedicated server in the cloud. The server is a Windows 2008 R2 machine. To publish I FTP files to ...
3
votes
1answer
156 views
Recommendations for hosting highly sensitive data
I am doing some investigation on hosting sensitive data. Mostly finance and fund data but at a personal level. This will be a secure website where users will be able to login and view their fund ...
7
votes
2answers
215 views
Should I store my intellectual property / code online?
As a hosting company we have gathered a busload of information over the years that are pretty much confidential. This information includes code, graphics, ERD diagrams, SEO strategies and so much ...
10
votes
3answers
636 views
VPS security best practice
I've just signed up for a linux VPS to host a website I've been creating and I need some advice on the best approach to secure it.
I've previously been hosting it off a VM in the house, but I want to ...
13
votes
3answers
850 views
How to keep a shared web hosting server secure?
What are the ways of keeping a shared LAMP server secure, assuming SSH access is available for every user?
Edit: I am mainly thinking of securing the server from the users themselves and between ...
