Questions tagged [web-hosting]

A type of service that allows a website to be made accessible via the internet. Web hosting can consist of storage space plus access to a website running a variety of technologies all the way up to fully dedicated servers provided by a third party.

Filter by
Sorted by
Tagged with
0 votes
1 answer
29 views

Recommended secure option for uploading files to web server from a dynamic IP?

I need the best way to access a webserver to upload/modify a PHP script. The website contains very sensitive information, gaining unauthorized access to this server and modifying files would lead to ...
user avatar
2 votes
0 answers
78 views

All private subdomains found and listed, including those from my home IP

It's been my understanding in the past years that it's not easily possible to find out all the subdomains of a domain (unless these are used publicly, like in hyperlinks, etc), and likewise not easily ...
user avatar
  • 215
0 votes
1 answer
135 views

Can the hosting provider who has access to the email server machine, access the emails?

I am planning to use a self hosted (Linux based) email server. However, the server will be on hosting providers machine. The hosting providers will have access to the physical machine. In that case, ...
user avatar
1 vote
0 answers
90 views

Is hosting your own website safe? [closed]

So I made this website on python with Flask. I want to host this website on a rasberry pi on my own home network which everybody in my family uses. Should I? Is it safe?
user avatar
1 vote
2 answers
134 views

Is the idea of a hosting provider with built-in DDoS protection plausible? [closed]

Any PaaS/shared hosting company which I came across offers its customers to protect their websites from DDoS via security-oriented CDNs such as CloudFlare or CloudFront which act as a proxy ...
user avatar
  • 13
0 votes
1 answer
104 views

Can we detect other websites of a user on a shared hosting?

I use a shared hosting plan which allows me to add multiple websites with one account/purchase. I have one website in the same plan for my work, and one for personal works. I can see both of them in ...
user avatar
0 votes
1 answer
152 views

Can attack to a website from a parked subdomain with different hosts?

I have a website like maindomain.com that is hosted on one IP address like 192.168.1.1. I want to add a subdomain from a different host (such as 192.168.1.2) to my root domain (maindomain.com), such ...
user avatar
  • 101
0 votes
1 answer
577 views

Why can I still receive email at my old domain after someone else bought it?

My domain expired years ago and was registered by another party. I have already read Can someone read my E-Mail if I lose ownership of my domain? and see that the answer is yes. Now if someone buys ...
user avatar
0 votes
1 answer
101 views

How to find out where a website is hosted?

I would like to find out where a website is hosted, in other words where the server/datacentre is located and the name of the company that provides the hosting. I have used the various websites that ...
user avatar
1 vote
1 answer
1k views

What is the best file permission for .user.ini in hosting folder?

My hoster placed a .user.ini in my public_html. What is the recommended file permission be? Now it's 644.
user avatar
0 votes
2 answers
149 views

Security a Linux VPS: is the "standard advice" enough?

Like so many others, I'm an intermediate web developer who is starting to get into the security side of things and I'm looking to start running a Linux VPS (Debian). For years, I've resisted the move ...
user avatar
  • 141
0 votes
1 answer
262 views

Are the following two ways to obtain server certificates for web servers to host web applications?

https://www.digitalocean.com/community/tutorials/how-to-serve-flask-applications-with-gunicorn-and-nginx-on-ubuntu-18-04#step-6-%E2%80%94-securing-the-application says for running a flask web ...
user avatar
  • 607
1 vote
1 answer
178 views

Risk of getting MySQL database compromised with a client application

I want to make a client-side, Windows-based application that allows the user to register and it will store the registration details in an online MySQL server. However when i googled ways to do this, ...
user avatar
  • 133
1 vote
1 answer
167 views

Would my IP be recorded when I visit a website

Could the website owner (admin) determine whether to record users IP? If the website owner (admin) doesn’t want to record users IP, will the host provider or domain name provider still get and record ...
user avatar
  • 133
1 vote
0 answers
113 views

Hosting password compromised [closed]

Last Monday I received two emails from my hoster: 10h42: Connection notification 10h42: Confirm your notification I didn't login that day, so I knew something was wrong. I immediately logged in, ...
user avatar
  • 119
2 votes
3 answers
421 views

What are the techniques to know if VPS cloud hosting provider is accessing my data?

Immutable laws of security: https://fossbytes.com/10-immutable-laws-security-microsoft/ If a bad guy has unrestricted physical access to your computer, it’s not your computer anymore. I understand ...
user avatar
133 votes
3 answers
14k views

Is HostGator storing my password in plaintext?

I want to bring this up to HostGator, but want to verify my suspicions before making a big fuss. I asked a customer care representative to help me add an SSL certificate to a site I host with them. ...
user avatar
  • 1,907
1 vote
0 answers
241 views

127.0.0.1 host header injection

I would like to know if this configuration is vulnerable to host header injection. I think it isn't, because it's listening on localhost, but I'm not sure. <VirtualHost 127.0.0.1:[% port %]> ...
user avatar
  • 11
0 votes
2 answers
243 views

How to check if a list of domains contains any WordPress installation?

Does any software or any other way to detect if a website contains any WordPress installation? For example lets say we have the website example.com which is not a WordPress site, but we have a ...
user avatar
  • 157
0 votes
3 answers
184 views

Security concerns on hosting server

Few years back I hosted my website on godaddy but I was not that tech savy so they (customer care people) assisted me on hosting the website on their shared hosting server. Since then I am on a ...
user avatar
-4 votes
1 answer
106 views

Are my website visitor's protected more if i use a vpn while self-hosting website [closed]

I installed a VPN and started configuring my website to use the VPN addresses, but will that add a stronger layer of security for my website visitor's?
user avatar
0 votes
1 answer
107 views

Is dedicating ips for each domain better than sharing one ip?

Would sharing an ip for multiple domains cause any kind of security problems? Imagine there are multiple domains which should be hosted on a server. Which is more secure? Sharing one ip for all the ...
user avatar
  • 3
3 votes
3 answers
446 views

Suspicious "100% guaranteed" web hosting security package

Notes: I have very limited knowledge and experience in this field. My boss does not want to spend a penny more that what we already paid for. The website has a form that sends a message to our email ...
user avatar
2 votes
0 answers
780 views

Digital Ocean WordPress droplet security precautions

I'm a front-end and WordPress developer. A week ago a number of my sites got hacked on shared hosting. The sites were built to a high standard, from scratch, using Underscores. I only use a small ...
user avatar
  • 186
6 votes
3 answers
4k views

My sites have been hacked by cpamatik.com , it passes all security checks with Google and Sucuri, but still redirects, any idea? [duplicate]

Almost all my sites got hacked by cpamatik.com virus All CMS were up to date, plugins, modules etc..(Drupal and Wordpress) , some sites I have logged in to work on, but some sites I haven't touched ...
user avatar
2 votes
2 answers
2k views

Dealing with the dangers of self-hosting a webserver?

Assuming for a self-hosted webserver: the webserver only hosts a static html website iptables is used to reject every IP except a few known ones only Port 443 is forwarded and the website requires ...
user avatar
  • 51
6 votes
1 answer
569 views

Find Security Flaws in My Payment Page

I've done some extensive research about how to secure your website from card fraud. iFrames do a pretty good job of this, however, It can still be worked around from certain exploits. Many payment ...
user avatar
3 votes
0 answers
249 views

Why exactly are self hosted websites deemed that dangerous? [closed]

Up to now I'm using a raspberry pi as a local server for trying out things or hosting my own little projects (beginner level), but I want to make it publicly available (most likely only for people I ...
user avatar
  • 51
1 vote
0 answers
102 views

How to tell if my hosting data is valid or a fake copy

I'm investigating an issue where we have consistent performance issues with our company web host and bad statistcs data in our hosting console. Our hosting provider console says our IP address is one ...
user avatar
1 vote
1 answer
2k views

dangers of using WAMPServer on my home PC?

Hello there I have been working on (learning) web development and have gone down the route of self hosting at the moment. I have a website which I've made, it doesnt have any user interface for input, ...
user avatar
13 votes
4 answers
5k views

Accessing multiple sites via HTTPS produces different, unrelated content (Peugeot club via HTTPS)

I've come across a random website Moodoo.cz. The interesting thing is that if you access it via the HTTPS: Moodoo.cz, the content completely changes. It is not that unusual - I guess server can serve ...
user avatar
  • 240
-1 votes
1 answer
402 views

hosting multiple websites on a single VM securely [closed]

I'm trying to deploy a server to host a multiple web application, I've done some research and found the hypervisor is the solution but i think it will generate some issues because VM hypervisor on a ...
user avatar
  • 95
0 votes
1 answer
132 views

Experiencing injection / brute force attacks

I'm handling a hosting services for website via WHM. Few months ago, I've been experiencing some automated attacks on the websites that I'm handling. See screenshots below: Are there any remedy for ...
user avatar
7 votes
2 answers
2k views

Manage SSL certificates for a multi-tenant website

We have given customers the option to allow custom domains which ultimately point to our server by changing the CNAME. Some of our customers would like to have SSL enabled to their domain but I am ...
user avatar
-3 votes
3 answers
2k views

Why can I access a website using its domain name but I cannot when using its IP address directly? [closed]

For my target domain e.g. www.domain.com I find the ip address with ping command but if I browse directly the ip address I obtain an error page. How is it possible? I know that problably the service ...
user avatar
  • 129
2 votes
1 answer
1k views

Can I use the same ssl cert to protect my web site and sign my app?

I'm considering buying an SSL cert from my web host provider (smarterasp.net) They list the cert as : SSL-S Comodo SSL Certificate - Single Domain or Subdomain Do you know if I can use that ...
user avatar
  • 123
0 votes
1 answer
151 views

Is it a risk running old modules on Apache?

I just saw that my hoster is running extremly old modules on Apache. The cURL Version is 3 years old, the SQLLite is from the 24th October 2014 and the zlib version is 1.2.8 instead of 1.2.11. Also, ...
user avatar
1 vote
5 answers
236 views

How to decide where to host an online store?

How can one know whether it is more secure to host the store on our own servers or on those from external vendors? Answer: Do a risk assessment. 1.) Summarized Answer 2.) Detailed Answer 3.) ...
user avatar
  • 21
1 vote
1 answer
146 views

Website is under attack, how to deal with the constant requests

When i logged on cpanel this morning, i noticed tens of thousands of requests for pages that don't exist coming from a few IPs. links such as : /cgi-bin/1998, /cgi-bin/1999, /cgi-bin/2000 etc.. ...
user avatar
33 votes
4 answers
8k views

Why are SSL certificates an annual expense?

I understand SSL certificates cost money because of reputation: most/all web browsers have a limited list of companies that demonstrated they are trusted sources of SSL certificates and therefore don'...
user avatar
  • 2,392
0 votes
1 answer
153 views

Is it safer and more secure to buy your own online storage from a hosting service or use major cloud services? [duplicate]

If I want to have a safe, private backup of my most confidential files online, what is the best way to go? Best as in, most secure, offering the highest level of privacy (i.e. being sure my data won't ...
user avatar
  • 229
3 votes
0 answers
131 views

Can I trace malicious email sent through a cloud hosting service?

Around the time my phone started acting like it was hacked, I was sent a suspicious email that opened automatically into a website without clicking on anything. I tracked it to a cloud hosting service....
user avatar
3 votes
1 answer
320 views

Are Anti DDoS server farms really effective?

I'm looking to host a web app in a datacenter and I'm considering a few options. All of them seem reputable and claim to offer Anti-DDoS protection. If just about every hosting provider is offering ...
user avatar
  • 1,091
2 votes
1 answer
271 views

Hosting send virus errors could not get rid of this

I have a wordpress website and hostgator keeps on sending this information → During a scan of our servers we identified malicious content in accounts under your control. We have quarantined the ...
user avatar
28 votes
3 answers
4k views

Pentesting against own web service hosted on 3rd party platform

I want to pentest websites and services programmed by our company, which is fine as long as we test it on our own infrastructure. What are the (legal) implications when pentesting our services once ...
user avatar
  • 589
3 votes
3 answers
128 views

Should my webhost show the root filesystem over FTP?

I use a commercial web host, when I log in via regular FTP this is how the directories looks like: It seems strange that I can access system files, I thought I would be limited to access files ...
user avatar
  • 31
3 votes
4 answers
3k views

Is email forwarding an altogether unsafe practice?

Some folks like the idea of keeping the same email address for life. It permits a personal and permanent email address (e.g. ben@affleck.com) even as you change internet service providers. You can ...
user avatar
  • 423
1 vote
1 answer
113 views

Hosted checkout page - who holds liability if there is fraud case?

We are planning to use the hosted checkout page - does it minimize our liability and security measures? In the event of hacking of our website or poor security of the website, does it affect the ...
user avatar
4 votes
1 answer
167 views

I was the subject of a low-impact DNS attack. What do I need to do?

Recently, my website was subject to a DNS attack of sorts. I have my domain name (which I won't say here but should be pretty easy to find if you're interested) registered with Hostgator and set up ...
user avatar
1 vote
0 answers
21 views

How to analyse a hacked server? [duplicate]

To be clear on of my server have been temporarily suspend because it was doing an DoS to another remote server. I was informed by the hosting company of the abnormal activity and I know what was the ...
user avatar