We changed our privacy policy. Read more.

Questions tagged [web-hosting]

A type of service that allows a website to be made accessible via the internet. Web hosting can consist of storage space plus access to a website running a variety of technologies all the way up to fully dedicated servers provided by a third party.

Filter by
Sorted by
Tagged with
0
votes
1answer
89 views

Can the hosting provider who has access to the email server machine, access the emails?

I am planning to use a self hosted (Linux based) email server. However, the server will be on hosting providers machine. The hosting providers will have access to the physical machine. In that case, ...
1
vote
0answers
55 views

Is hosting your own website safe? [closed]

So I made this website on python with Flask. I want to host this website on a rasberry pi on my own home network which everybody in my family uses. Should I? Is it safe?
1
vote
2answers
95 views

Is the idea of a hosting provider with built-in DDoS protection plausible? [closed]

Any PaaS/shared hosting company which I came across offers its customers to protect their websites from DDoS via security-oriented CDNs such as CloudFlare or CloudFront which act as a proxy ...
0
votes
1answer
69 views

Can we detect other websites of a user on a shared hosting?

I use a shared hosting plan which allows me to add multiple websites with one account/purchase. I have one website in the same plan for my work, and one for personal works. I can see both of them in ...
0
votes
1answer
79 views

Can attack to a website from a parked subdomain with different hosts?

I have a website like maindomain.com that hosted on a different hosting like 192.168.1.1 i want to add a subdomain from a different host like 192.168.1.2 to my main domain which my address will be ...
0
votes
1answer
295 views

Why can I still receive email at my old domain after someone else bought it?

My domain expired years ago and was registered by another party. I have already read Can someone read my E-Mail if I lose ownership of my domain? and see that the answer is yes. Now if someone buys ...
0
votes
1answer
63 views

How to find out where a website is hosted?

I would like to find out where a website is hosted, in other words where the server/datacentre is located and the name of the company that provides the hosting. I have used the various websites that ...
1
vote
1answer
665 views

What is the best file permission for .user.ini in hosting folder?

My hoster placed a .user.ini in my public_html. What is the recommended file permission be? Now it's 644.
-1
votes
2answers
104 views

Security a Linux VPS: is the "standard advice" enough?

Like so many others, I'm an intermediate web developer who is starting to get into the security side of things and I'm looking to start running a Linux VPS (Debian). For years, I've resisted the move ...
0
votes
1answer
190 views

Are the following two ways to obtain server certificates for web servers to host web applications?

https://www.digitalocean.com/community/tutorials/how-to-serve-flask-applications-with-gunicorn-and-nginx-on-ubuntu-18-04#step-6-%E2%80%94-securing-the-application says for running a flask web ...
1
vote
1answer
130 views

Risk of getting MySQL database compromised with a client application

I want to make a client-side, Windows-based application that allows the user to register and it will store the registration details in an online MySQL server. However when i googled ways to do this, ...
1
vote
1answer
118 views

Would my IP be recorded when I visit a website

Could the website owner (admin) determine whether to record users IP? If the website owner (admin) doesn’t want to record users IP, will the host provider or domain name provider still get and record ...
1
vote
0answers
73 views

Hosting password compromised [closed]

Last Monday I received two emails from my hoster: 10h42: Connection notification 10h42: Confirm your notification I didn't login that day, so I knew something was wrong. I immediately logged in, ...
2
votes
3answers
272 views

What are the techniques to know if VPS cloud hosting provider is accessing my data?

Immutable laws of security: https://fossbytes.com/10-immutable-laws-security-microsoft/ If a bad guy has unrestricted physical access to your computer, it’s not your computer anymore. I understand ...
132
votes
3answers
14k views

Is HostGator storing my password in plaintext?

I want to bring this up to HostGator, but want to verify my suspicions before making a big fuss. I asked a customer care representative to help me add an SSL certificate to a site I host with them. ...
1
vote
0answers
182 views

127.0.0.1 host header injection

I would like to know if this configuration is vulnerable to host header injection. I think it isn't, because it's listening on localhost, but I'm not sure. <VirtualHost 127.0.0.1:[% port %]> ...
0
votes
2answers
141 views

How to check if a list of domains contains any WordPress installation?

Does any software or any other way to detect if a website contains any WordPress installation? For example lets say we have the website example.com which is not a WordPress site, but we have a ...
0
votes
3answers
149 views

Security concerns on hosting server

Few years back I hosted my website on godaddy but I was not that tech savy so they (customer care people) assisted me on hosting the website on their shared hosting server. Since then I am on a ...
-4
votes
1answer
67 views

Are my website visitor's protected more if i use a vpn while self-hosting website [closed]

I installed a VPN and started configuring my website to use the VPN addresses, but will that add a stronger layer of security for my website visitor's?
0
votes
1answer
64 views

Is dedicating ips for each domain better than sharing one ip?

Would sharing an ip for multiple domains cause any kind of security problems? Imagine there are multiple domains which should be hosted on a server. Which is more secure? Sharing one ip for all the ...
3
votes
3answers
398 views

Suspicious "100% guaranteed" web hosting security package

Notes: I have very limited knowledge and experience in this field. My boss does not want to spend a penny more that what we already paid for. The website has a form that sends a message to our email ...
2
votes
0answers
706 views

Digital Ocean WordPress droplet security precautions

I'm a front-end and WordPress developer. A week ago a number of my sites got hacked on shared hosting. The sites were built to a high standard, from scratch, using Underscores. I only use a small ...
6
votes
3answers
4k views

My sites have been hacked by cpamatik.com , it passes all security checks with Google and Sucuri, but still redirects, any idea? [duplicate]

Almost all my sites got hacked by cpamatik.com virus All CMS were up to date, plugins, modules etc..(Drupal and Wordpress) , some sites I have logged in to work on, but some sites I haven't touched ...
2
votes
2answers
2k views

Dealing with the dangers of self-hosting a webserver?

Assuming for a self-hosted webserver: the webserver only hosts a static html website iptables is used to reject every IP except a few known ones only Port 443 is forwarded and the website requires ...
6
votes
1answer
516 views

Find Security Flaws in My Payment Page

I've done some extensive research about how to secure your website from card fraud. iFrames do a pretty good job of this, however, It can still be worked around from certain exploits. Many payment ...
3
votes
0answers
174 views

Why exactly are self hosted websites deemed that dangerous? [closed]

Up to now I'm using a raspberry pi as a local server for trying out things or hosting my own little projects (beginner level), but I want to make it publicly available (most likely only for people I ...
1
vote
0answers
69 views

How to tell if my hosting data is valid or a fake copy

I'm investigating an issue where we have consistent performance issues with our company web host and bad statistcs data in our hosting console. Our hosting provider console says our IP address is one ...
1
vote
1answer
2k views

dangers of using WAMPServer on my home PC?

Hello there I have been working on (learning) web development and have gone down the route of self hosting at the moment. I have a website which I've made, it doesnt have any user interface for input, ...
13
votes
4answers
5k views

Accessing multiple sites via HTTPS produces different, unrelated content (Peugeot club via HTTPS)

I've come across a random website Moodoo.cz. The interesting thing is that if you access it via the HTTPS: Moodoo.cz, the content completely changes. It is not that unusual - I guess server can serve ...
-1
votes
1answer
313 views

hosting multiple websites on a single VM securely [closed]

I'm trying to deploy a server to host a multiple web application, I've done some research and found the hypervisor is the solution but i think it will generate some issues because VM hypervisor on a ...
0
votes
1answer
95 views

Experiencing injection / brute force attacks

I'm handling a hosting services for website via WHM. Few months ago, I've been experiencing some automated attacks on the websites that I'm handling. See screenshots below: Are there any remedy for ...
7
votes
2answers
1k views

Manage SSL certificates for a multi-tenant website

We have given customers the option to allow custom domains which ultimately point to our server by changing the CNAME. Some of our customers would like to have SSL enabled to their domain but I am ...
-3
votes
3answers
2k views

Why can I access a website using its domain name but I cannot when using its IP address directly? [closed]

For my target domain e.g. www.domain.com I find the ip address with ping command but if I browse directly the ip address I obtain an error page. How is it possible? I know that problably the service ...
2
votes
1answer
924 views

Can I use the same ssl cert to protect my web site and sign my app?

I'm considering buying an SSL cert from my web host provider (smarterasp.net) They list the cert as : SSL-S Comodo SSL Certificate - Single Domain or Subdomain Do you know if I can use that ...
0
votes
1answer
101 views

Is it a risk running old modules on Apache?

I just saw that my hoster is running extremly old modules on Apache. The cURL Version is 3 years old, the SQLLite is from the 24th October 2014 and the zlib version is 1.2.8 instead of 1.2.11. Also, ...
1
vote
5answers
197 views

How to decide where to host an online store?

How can one know whether it is more secure to host the store on our own servers or on those from external vendors? Answer: Do a risk assessment. 1.) Summarized Answer 2.) Detailed Answer 3.) ...
1
vote
1answer
112 views

Website is under attack, how to deal with the constant requests

When i logged on cpanel this morning, i noticed tens of thousands of requests for pages that don't exist coming from a few IPs. links such as : /cgi-bin/1998, /cgi-bin/1999, /cgi-bin/2000 etc.. ...
33
votes
4answers
8k views

Why are SSL certificates an annual expense?

I understand SSL certificates cost money because of reputation: most/all web browsers have a limited list of companies that demonstrated they are trusted sources of SSL certificates and therefore don'...
0
votes
1answer
116 views

Is it safer and more secure to buy your own online storage from a hosting service or use major cloud services? [duplicate]

If I want to have a safe, private backup of my most confidential files online, what is the best way to go? Best as in, most secure, offering the highest level of privacy (i.e. being sure my data won't ...
3
votes
0answers
91 views

Can I trace malicious email sent through a cloud hosting service?

Around the time my phone started acting like it was hacked, I was sent a suspicious email that opened automatically into a website without clicking on anything. I tracked it to a cloud hosting service....
3
votes
1answer
278 views

Are Anti DDoS server farms really effective?

I'm looking to host a web app in a datacenter and I'm considering a few options. All of them seem reputable and claim to offer Anti-DDoS protection. If just about every hosting provider is offering ...
2
votes
1answer
237 views

Hosting send virus errors could not get rid of this

I have a wordpress website and hostgator keeps on sending this information → During a scan of our servers we identified malicious content in accounts under your control. We have quarantined the ...
28
votes
3answers
4k views

Pentesting against own web service hosted on 3rd party platform

I want to pentest websites and services programmed by our company, which is fine as long as we test it on our own infrastructure. What are the (legal) implications when pentesting our services once ...
3
votes
3answers
94 views

Should my webhost show the root filesystem over FTP?

I use a commercial web host, when I log in via regular FTP this is how the directories looks like: It seems strange that I can access system files, I thought I would be limited to access files ...
2
votes
4answers
2k views

Is email forwarding an altogether unsafe practice?

Some folks like the idea of keeping the same email address for life. It permits a personal and permanent email address (e.g. ben@affleck.com) even as you change internet service providers. You can ...
1
vote
1answer
69 views

Hosted checkout page - who holds liability if there is fraud case?

We are planning to use the hosted checkout page - does it minimize our liability and security measures? In the event of hacking of our website or poor security of the website, does it affect the ...
4
votes
1answer
133 views

I was the subject of a low-impact DNS attack. What do I need to do?

Recently, my website was subject to a DNS attack of sorts. I have my domain name (which I won't say here but should be pretty easy to find if you're interested) registered with Hostgator and set up ...
1
vote
0answers
21 views

How to analyse a hacked server? [duplicate]

To be clear on of my server have been temporarily suspend because it was doing an DoS to another remote server. I was informed by the hosting company of the abnormal activity and I know what was the ...
2
votes
1answer
170 views

Is internal or external hosting more secure? [closed]

I have been looking for a while to find out the number of malicious attacks that have been successful against internal vs externally hosted web and SQL solutions. When I say internal, I mean the ...
0
votes
2answers
1k views

Security scan with, or without, IP whitelisting in the firewall and isn't that introducing a weak point?

In case of an automated security scan is it more desirable to get the scanner IP addresses whitelisted in order to possibly find vulnerabilities behind the firewall, or to scan in front of/against the ...