Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [web-hosting]

A type of service that allows a website to be made accessible via the internet. Web hosting can consist of storage space plus access to a website running a variety of technologies all the way up to fully dedicated servers provided by a third party.

-3
votes
1answer
48 views

Are my website visitor's protected more if i use a vpn while self-hosting website

I installed a VPN and started configuring my website to use the VPN addresses, but will that add a stronger layer of security for my website visitor's?
-2
votes
0answers
34 views

How safe are Cloud Providers like Firebase? [on hold]

So currently we run our SSR App on a Reverse Proxy on a Digital Ocean Droplet. The problem is that I don´t have the time or the knowledge to worry too much about security. Because we use Firebase ...
0
votes
1answer
51 views

Is dedicating ips for each domain better than sharing one ip?

Would sharing an ip for multiple domains cause any kind of security problems? Imagine there are multiple domains which should be hosted on a server. Which is more secure? Sharing one ip for all the ...
3
votes
3answers
309 views

Suspicious “100% guaranteed” web hosting security package

Notes: I have very limited knowledge and experience in this field. My boss does not want to spend a penny more that what we already paid for. The website has a form that sends a message to our email ...
0
votes
0answers
17 views

Malicious php files and strange directories appear in an HTML only directory [duplicate]

I host a website at a hosting company. I believe it is the "shared" kind of hosting. I was hacked somehow and sudden php files and directories pop up with certain frequency. Also, on my error logs I ...
2
votes
0answers
96 views

Digital Ocean WordPress droplet security precautions

I'm a front-end and WordPress developer. A week ago a number of my sites got hacked on shared hosting. The sites were built to a high standard, from scratch, using Underscores. I only use a small ...
5
votes
3answers
2k views

My sites have been hacked by cpamatik.com , it passes all security checks with Google and Sucuri, but still redirects, any idea? [duplicate]

Almost all my sites got hacked by cpamatik.com virus All CMS were up to date, plugins, modules etc..(Drupal and Wordpress) , some sites I have logged in to work on, but some sites I haven't touched ...
0
votes
2answers
124 views

Dealing with the dangers of self-hosting a webserver?

Assuming for a self-hosted webserver: the webserver only hosts a static html website iptables is used to reject every IP except a few known ones only Port 443 is forwarded and the website requires ...
6
votes
1answer
438 views

Find Security Flaws in My Payment Page

I've done some extensive research about how to secure your website from card fraud. iFrames do a pretty good job of this, however, It can still be worked around from certain exploits. Many payment ...
3
votes
0answers
89 views

Why exactly are self hosted websites deemed that dangerous? [closed]

Up to now I'm using a raspberry pi as a local server for trying out things or hosting my own little projects (beginner level), but I want to make it publicly available (most likely only for people I ...
1
vote
0answers
47 views

How to tell if my hosting data is valid or a fake copy

I'm investigating an issue where we have consistent performance issues with our company web host and bad statistcs data in our hosting console. Our hosting provider console says our IP address is one ...
1
vote
1answer
72 views

dangers of using WAMPServer on my home PC?

Hello there I have been working on (learning) web development and have gone down the route of self hosting at the moment. I have a website which I've made, it doesnt have any user interface for input, ...
13
votes
4answers
5k views

Accessing multiple sites via HTTPS produces different, unrelated content (Peugeot club via HTTPS)

I've come across a random website Moodoo.cz. The interesting thing is that if you access it via the HTTPS: Moodoo.cz, the content completely changes. It is not that unusual - I guess server can serve ...
-1
votes
1answer
55 views

hosting multiple websites on a single VM securely [closed]

I'm trying to deploy a server to host a multiple web application, I've done some research and found the hypervisor is the solution but i think it will generate some issues because VM hypervisor on a ...
0
votes
1answer
85 views

Experiencing injection / brute force attacks

I'm handling a hosting services for website via WHM. Few months ago, I've been experiencing some automated attacks on the websites that I'm handling. See screenshots below: Are there any remedy for ...
5
votes
2answers
378 views

Manage SSL certificates for a multi-tenant website

We have given customers the option to allow custom domains which ultimately point to our server by changing the CNAME. Some of our customers would like to have SSL enabled to their domain but I am ...
-3
votes
3answers
160 views

Why can I access a website using its domain name but I cannot when using its IP address directly? [closed]

For my target domain e.g. www.domain.com I find the ip address with ping command but if I browse directly the ip address I obtain an error page. How is it possible? I know that problably the service ...
2
votes
1answer
260 views

Can I use the same ssl cert to protect my web site and sign my app?

I'm considering buying an SSL cert from my web host provider (smarterasp.net) They list the cert as : SSL-S Comodo SSL Certificate - Single Domain or Subdomain Do you know if I can use that ...
0
votes
1answer
70 views

Is it a risk running old modules on Apache?

I just saw that my hoster is running extremly old modules on Apache. The cURL Version is 3 years old, the SQLLite is from the 24th October 2014 and the zlib version is 1.2.8 instead of 1.2.11. Also, ...
0
votes
5answers
187 views

How to decide where to host an online store?

How can one know whether it is more secure to host the store on our own servers or on those from external vendors? Answer: Do a risk assessment. 1.) Summarized Answer 2.) Detailed Answer 3.) ...
1
vote
1answer
105 views

Website is under attack, how to deal with the constant requests

When i logged on cpanel this morning, i noticed tens of thousands of requests for pages that don't exist coming from a few IPs. links such as : /cgi-bin/1998, /cgi-bin/1999, /cgi-bin/2000 etc.. ...
32
votes
4answers
7k views

Why are SSL certificates an annual expense?

I understand SSL certificates cost money because of reputation: most/all web browsers have a limited list of companies that demonstrated they are trusted sources of SSL certificates and therefore don'...
0
votes
1answer
107 views

Is it safer and more secure to buy your own online storage from a hosting service or use major cloud services? [duplicate]

If I want to have a safe, private backup of my most confidential files online, what is the best way to go? Best as in, most secure, offering the highest level of privacy (i.e. being sure my data won't ...
2
votes
0answers
77 views

Can I trace malicious email sent through a cloud hosting service?

Around the time my phone started acting like it was hacked, I was sent a suspicious email that opened automatically into a website without clicking on anything. I tracked it to a cloud hosting service....
3
votes
1answer
234 views

Are Anti DDoS server farms really effective?

I'm looking to host a web app in a datacenter and I'm considering a few options. All of them seem reputable and claim to offer Anti-DDoS protection. If just about every hosting provider is offering ...
2
votes
1answer
228 views

Hosting send virus errors could not get rid of this

I have a wordpress website and hostgator keeps on sending this information → During a scan of our servers we identified malicious content in accounts under your control. We have quarantined the ...
28
votes
3answers
3k views

Pentesting against own web service hosted on 3rd party platform

I want to pentest websites and services programmed by our company, which is fine as long as we test it on our own infrastructure. What are the (legal) implications when pentesting our services once ...
3
votes
3answers
87 views

Should my webhost show the root filesystem over FTP?

I use a commercial web host, when I log in via regular FTP this is how the directories looks like: It seems strange that I can access system files, I thought I would be limited to access files ...
0
votes
0answers
44 views

CNAME url is displaying someone else's content

A security research demonstrated he was able to add our CNAME url as his profile for the hosting company we share. Example: ReseacherA profile url = our.cname.hostingcompany.com He is not actually ...
3
votes
3answers
176 views

Is email forwarding an altogether unsafe practice?

Some folks like the idea of keeping the same email address for life. It permits a personal and permanent email address (e.g. ben@affleck.com) even as you change internet service providers. You can ...
1
vote
1answer
61 views

Hosted checkout page - who holds liability if there is fraud case?

We are planning to use the hosted checkout page - does it minimize our liability and security measures? In the event of hacking of our website or poor security of the website, does it affect the ...
4
votes
1answer
102 views

I was the subject of a low-impact DNS attack. What do I need to do?

Recently, my website was subject to a DNS attack of sorts. I have my domain name (which I won't say here but should be pretty easy to find if you're interested) registered with Hostgator and set up ...
1
vote
0answers
21 views

How to analyse a hacked server? [duplicate]

To be clear on of my server have been temporarily suspend because it was doing an DoS to another remote server. I was informed by the hosting company of the abnormal activity and I know what was the ...
2
votes
1answer
92 views

Is internal or external hosting more secure? [closed]

I have been looking for a while to find out the number of malicious attacks that have been successful against internal vs externally hosted web and SQL solutions. When I say internal, I mean the ...
0
votes
0answers
269 views

Managed hosting with PCI SAQ D for Service Providers compliance

We have some hotel websites on our current managed hosting that link via URL redirect to a PCI Compliant third party booking engine hosted elsewhere. We do no more than pass date of arrival and number ...
0
votes
2answers
821 views

Security scan with, or without, IP whitelisting in the firewall and isn't that introducing a weak point?

In case of an automated security scan is it more desirable to get the scanner IP addresses whitelisted in order to possibly find vulnerabilities behind the firewall, or to scan in front of/against the ...
0
votes
1answer
39 views

Is there a way to guess a shared server's control panel's version?

I am performing research on the security of control panel software for shared hosting providers, and I am interested to know if there is a way to identify the version of the control panel software ...
1
vote
1answer
829 views

VPN / VPS and IP logs

Here's the situation: 1) I rent a VPS at a hoster and install VPN on it. 2) Completely disable all logs. Those logs that can not be disabled - permanently delete. 3) I connect to my VPS via VPN (...
0
votes
0answers
69 views

How to block ftp password guessers in shared hosting?

Is this also possible for shared hosting to: 1.use a web software to block password guessing attempts 2.change ftp port 3.locking down access to specific source IP addresses If none of above is ...
1
vote
1answer
111 views

Are any container solutions secure enough to run fully un-trusted code, particularly as a VPS service?

A number of answers here on this Stack Exchange argue that containers are inherently insecure and one should never run untrusted code in a container, let alone run a container built entirely by ...
1
vote
0answers
49 views

Hosting companies by AS Number [closed]

Is there any website out the like bgp.he.net (Hurricane Electric) or ipv4info.com that has a database with all VPS/Dedicated Server comapnies filtered by AS Number? I know that there are plenty of ...
1
vote
2answers
179 views

How do web hosts know you own your domain?

Let's say I registered a domain on Namecheap and want DigitalOcean to be my host. This can be achieved by first setting the nameservers to DigitalOcean in Namecheap's backend: Second, we add some NS ...
3
votes
1answer
77 views

Secure Software Distribution: Is serving a file through HTTPS good enough?

I'd like to know whether HTTPS can be used as a secure means of software distribution. Concretely, can I put up a file on a server making it accessible through a public HTTPS URL and be sure that it ...
6
votes
2answers
1k views

Securely decommissioning a dedicated server

One of my dedicated hosting CentOS servers hit 12 years. I received an end-of-life notice on it, and I started receiving SMART errors as well. I guess it's time to let it go. But before I do, I'd like ...
1
vote
2answers
124 views

What is the typical computer setup and hosting arrangement of malicious bots?

It's quite well known that if an attacker wanted to, they could spoof their IP address by using a proxy server or some other means. Whilst that's possible, whenever I perform a geo-location lookup ...
0
votes
1answer
82 views

Security of Data and Source Code in a 3rd Party Hosting Environment [closed]

What expectation should I have for the security of my data and codebase hosted with a 3rd party e.g. godaddy, or any other similar hosting provider. How common is it that some IT employee within the ...
2
votes
0answers
61 views

Cloned site with tricky HTTP_HOST

Another site has cloned mine. The site in question is netdna-cdn.com, and if you do a search on Google ("site:netdna-cdn.com") you will see it has cloned 100's if not 1000's of sites. So in times ...
1
vote
2answers
2k views

Will a wildcard SSL work properly for an A record subdomain pointing to another domain/website?

Client has wildcard SSL for his domain/subdomains. The application we are building is on one of our linux servers using one of our IP addresses and is contained within an account named www.somedomain....
6
votes
2answers
681 views

How can bulletproof hosting be feasible?

Bulletproof Hosting Providers (BPHS) allow servers containing illegal porn, malware, organized (cyber)crime, major spam and all this on the WWW? If Spamhaus can block the entire subnet of such a ...
90
votes
8answers
30k views

If a provider sees the last 4 characters of my password, can they see it in full?

I have some domains/websites as well as emails with Bluehost. Every time I need support, they need the last 4 characters of my main password for the account. They cannot tell me how they store the ...