Skip to main content
Share Your Experience: Take the 2024 Developer Survey

Questions tagged [web-hosting]

A type of service that allows a website to be made accessible via the internet. Web hosting can consist of storage space plus access to a website running a variety of technologies all the way up to fully dedicated servers provided by a third party.

Filter by
Sorted by
Tagged with
0 votes
0 answers
72 views

Subdomain vs Virtual Path discovery by bots

I have a website with a URL of lets say "123.example.com" where I am hosting a large ERP system. Does hosting the application at "123.example.com/myapp" provide any layer of ...
Freeman Helmuth's user avatar
0 votes
1 answer
259 views

HIPAA Compliance for Frontend Hosting

I am using a non-HIPAA-compliant vendor (Vercel) for the hosting of my site. This includes serverless functions on Vercel's infrastructure that serve HTML/CSS/JS. However, the entire backend/database ...
Infamous911's user avatar
34 votes
4 answers
9k views

Domain about to expire. Afraid that new owners will spread malware

I have a domain that is about to expire. It was used for hosting my freeware which I do not maintain anymore but can still be found on shareware directories. The application points to my domain (...
microwth's user avatar
  • 2,473
1 vote
1 answer
157 views

Do web-hosting sites like Heroku or Railway expose your database?

I was watching this video https://www.youtube.com/watch?v=Qm7k1CPFkIc about how to steal passwords and the guy mentioned that you can use shodan.io (a site that lists various devices connected to the ...
Some Guy's user avatar
  • 115
2 votes
0 answers
76 views

Renew a web hosting certificate on IIS [closed]

I have a site published in IIS. The site using HTTPS protocol and the web hosting certificate is already expired. This web hosting certificate path is under the trust root certificate which is not ...
hud. 's user avatar
  • 21
1 vote
2 answers
198 views

Should I worry? Web hosting mailed me my details and returned my password (unencrypted) and IP logged

Unfortunately, I've tried a hosting service and it returned my password value as it was in my inbox (as connection details). I went to a control panel in an attempt to delete or deactivate my account. ...
linuxverse's user avatar
0 votes
1 answer
407 views

Securing home hosted servers (opening ports vs tunnelling)

When it comes to securing your home hosted servers, the most common advice appears to be: 1.Have a VPS with a reverse proxy 2.Tunnel to your home network from the VPS using a VPN like Wireguard ...
user288803's user avatar
2 votes
1 answer
174 views

Security concern with hosting a chrome extension on a public server

We have chrome extension that is for internal use by our clients. It is force-installed via enterprise policy. So far, we have it published on the Chrome WebStore but we need to move off of it due to ...
blissfool's user avatar
  • 121
0 votes
0 answers
49 views

Are these cPanel processes malicious? [duplicate]

I have previously asked a question There's an expect.php file in all the git repositories of my web server, is this malicious? and this question is a further continuation if it. After investigating ...
Syed M. Sannan's user avatar
0 votes
1 answer
73 views

Recommended secure option for uploading files to web server from a dynamic IP?

I need the best way to access a webserver to upload/modify a PHP script. The website contains very sensitive information, gaining unauthorized access to this server and modifying files would lead to ...
user1324762's user avatar
2 votes
0 answers
437 views

All private subdomains found and listed, including those from my home IP

It's been my understanding in the past years that it's not easily possible to find out all the subdomains of a domain (unless these are used publicly, like in hyperlinks, etc), and likewise not easily ...
Nuno's user avatar
  • 215
0 votes
1 answer
403 views

Can the hosting provider who has access to the email server machine, access the emails?

I am planning to use a self hosted (Linux based) email server. However, the server will be on hosting providers machine. The hosting providers will have access to the physical machine. In that case, ...
Ahmad Ismail's user avatar
1 vote
0 answers
129 views

Is hosting your own website safe? [closed]

So I made this website on python with Flask. I want to host this website on a rasberry pi on my own home network which everybody in my family uses. Should I? Is it safe?
sahal mulki's user avatar
1 vote
2 answers
168 views

Is the idea of a hosting provider with built-in DDoS protection plausible? [closed]

Any PaaS/shared hosting company which I came across offers its customers to protect their websites from DDoS via security-oriented CDNs such as CloudFlare or CloudFront which act as a proxy ...
Semo's user avatar
  • 13
1 vote
1 answer
165 views

Can we detect other websites of a user on a shared hosting?

I use a shared hosting plan which allows me to add multiple websites with one account/purchase. I have one website in the same plan for my work, and one for personal works. I can see both of them in ...
Moradnejad's user avatar
0 votes
1 answer
226 views

Can attack to a website from a parked subdomain with different hosts?

I have a website like maindomain.com that is hosted on one IP address like 192.168.1.1. I want to add a subdomain from a different host (such as 192.168.1.2) to my root domain (maindomain.com), such ...
Mister X's user avatar
  • 101
0 votes
1 answer
2k views

Why can I still receive email at my old domain after someone else bought it?

My domain expired years ago and was registered by another party. I have already read Can someone read my E-Mail if I lose ownership of my domain? and see that the answer is yes. Now if someone buys ...
teauxfu's user avatar
0 votes
1 answer
171 views

How to find out where a website is hosted?

I would like to find out where a website is hosted, in other words where the server/datacentre is located and the name of the company that provides the hosting. I have used the various websites that ...
cheekykid's user avatar
2 votes
2 answers
3k views

What is the best file permission for .user.ini in hosting folder?

My hoster placed a .user.ini in my public_html. What is the recommended file permission be? Now it's 644.
cilapo1541's user avatar
0 votes
2 answers
282 views

Security a Linux VPS: is the "standard advice" enough?

Like so many others, I'm an intermediate web developer who is starting to get into the security side of things and I'm looking to start running a Linux VPS (Debian). For years, I've resisted the move ...
daveslab's user avatar
  • 141
0 votes
1 answer
319 views

Are the following two ways to obtain server certificates for web servers to host web applications?

https://www.digitalocean.com/community/tutorials/how-to-serve-flask-applications-with-gunicorn-and-nginx-on-ubuntu-18-04#step-6-%E2%80%94-securing-the-application says for running a flask web ...
Tim's user avatar
  • 657
1 vote
1 answer
234 views

Risk of getting MySQL database compromised with a client application

I want to make a client-side, Windows-based application that allows the user to register and it will store the registration details in an online MySQL server. However when i googled ways to do this, ...
gudako's user avatar
  • 133
1 vote
1 answer
207 views

Would my IP be recorded when I visit a website

Could the website owner (admin) determine whether to record users IP? If the website owner (admin) doesn’t want to record users IP, will the host provider or domain name provider still get and record ...
gudako's user avatar
  • 133
1 vote
0 answers
140 views

Hosting password compromised [closed]

Last Monday I received two emails from my hoster: 10h42: Connection notification 10h42: Confirm your notification I didn't login that day, so I knew something was wrong. I immediately logged in, ...
COil's user avatar
  • 129
2 votes
3 answers
802 views

What are the techniques to know if VPS cloud hosting provider is accessing my data?

Immutable laws of security: https://fossbytes.com/10-immutable-laws-security-microsoft/ If a bad guy has unrestricted physical access to your computer, it’s not your computer anymore. I understand ...
Mars Robertson's user avatar
131 votes
3 answers
15k views

Is HostGator storing my password in plaintext?

I want to bring this up to HostGator, but want to verify my suspicions before making a big fuss. I asked a customer care representative to help me add an SSL certificate to a site I host with them. ...
M -'s user avatar
  • 1,937
1 vote
0 answers
317 views

127.0.0.1 host header injection

I would like to know if this configuration is vulnerable to host header injection. I think it isn't, because it's listening on localhost, but I'm not sure. <VirtualHost 127.0.0.1:[% port %]> ...
Dudule's user avatar
  • 11
0 votes
2 answers
393 views

How to check if a list of domains contains any WordPress installation?

Does any software or any other way to detect if a website contains any WordPress installation? For example lets say we have the website example.com which is not a WordPress site, but we have a ...
chrysst's user avatar
  • 157
0 votes
3 answers
218 views

Security concerns on hosting server

Few years back I hosted my website on godaddy but I was not that tech savy so they (customer care people) assisted me on hosting the website on their shared hosting server. Since then I am on a ...
Aseem Sharma's user avatar
-4 votes
1 answer
144 views

Are my website visitor's protected more if i use a vpn while self-hosting website [closed]

I installed a VPN and started configuring my website to use the VPN addresses, but will that add a stronger layer of security for my website visitor's?
morgansbyers's user avatar
0 votes
1 answer
137 views

Is dedicating ips for each domain better than sharing one ip?

Would sharing an ip for multiple domains cause any kind of security problems? Imagine there are multiple domains which should be hosted on a server. Which is more secure? Sharing one ip for all the ...
Pouria's user avatar
  • 3
3 votes
3 answers
477 views

Suspicious "100% guaranteed" web hosting security package

Notes: I have very limited knowledge and experience in this field. My boss does not want to spend a penny more that what we already paid for. The website has a form that sends a message to our email ...
Davidwestcoast's user avatar
2 votes
0 answers
883 views

Digital Ocean WordPress droplet security precautions

I'm a front-end and WordPress developer. A week ago a number of my sites got hacked on shared hosting. The sites were built to a high standard, from scratch, using Underscores. I only use a small ...
Sam's user avatar
  • 176
6 votes
3 answers
4k views

My sites have been hacked by cpamatik.com , it passes all security checks with Google and Sucuri, but still redirects, any idea? [duplicate]

Almost all my sites got hacked by cpamatik.com virus All CMS were up to date, plugins, modules etc..(Drupal and Wordpress) , some sites I have logged in to work on, but some sites I haven't touched ...
Bruno  Vincent's user avatar
2 votes
2 answers
3k views

Dealing with the dangers of self-hosting a webserver?

Assuming for a self-hosted webserver: the webserver only hosts a static html website iptables is used to reject every IP except a few known ones only Port 443 is forwarded and the website requires ...
Nesuma's user avatar
  • 71
6 votes
1 answer
641 views

Find Security Flaws in My Payment Page

I've done some extensive research about how to secure your website from card fraud. iFrames do a pretty good job of this, however, It can still be worked around from certain exploits. Many payment ...
Matt The Ninja's user avatar
3 votes
0 answers
442 views

Why exactly are self hosted websites deemed that dangerous? [closed]

Up to now I'm using a raspberry pi as a local server for trying out things or hosting my own little projects (beginner level), but I want to make it publicly available (most likely only for people I ...
Nesuma's user avatar
  • 71
1 vote
0 answers
126 views

How to tell if my hosting data is valid or a fake copy

I'm investigating an issue where we have consistent performance issues with our company web host and bad statistcs data in our hosting console. Our hosting provider console says our IP address is one ...
user avatar
1 vote
1 answer
2k views

dangers of using WAMPServer on my home PC?

Hello there I have been working on (learning) web development and have gone down the route of self hosting at the moment. I have a website which I've made, it doesnt have any user interface for input, ...
Big T Larrity's user avatar
13 votes
4 answers
5k views

Accessing multiple sites via HTTPS produces different, unrelated content (Peugeot club via HTTPS)

I've come across a random website Moodoo.cz. The interesting thing is that if you access it via the HTTPS: Moodoo.cz, the content completely changes. It is not that unusual - I guess server can serve ...
Jeyekomon's user avatar
  • 240
-1 votes
1 answer
593 views

hosting multiple websites on a single VM securely [closed]

I'm trying to deploy a server to host a multiple web application, I've done some research and found the hypervisor is the solution but i think it will generate some issues because VM hypervisor on a ...
mrashid's user avatar
  • 195
0 votes
1 answer
168 views

Experiencing injection / brute force attacks

I'm handling a hosting services for website via WHM. Few months ago, I've been experiencing some automated attacks on the websites that I'm handling. See screenshots below: Are there any remedy for ...
Brian Coolidge's user avatar
7 votes
2 answers
2k views

Manage SSL certificates for a multi-tenant website

We have given customers the option to allow custom domains which ultimately point to our server by changing the CNAME. Some of our customers would like to have SSL enabled to their domain but I am ...
Chandra Paudel's user avatar
-3 votes
3 answers
7k views

Why can I access a website using its domain name but I cannot when using its IP address directly? [closed]

For my target domain e.g. www.domain.com I find the ip address with ping command but if I browse directly the ip address I obtain an error page. How is it possible? I know that problably the service ...
Bob's user avatar
  • 139
2 votes
1 answer
1k views

Can I use the same ssl cert to protect my web site and sign my app?

I'm considering buying an SSL cert from my web host provider (smarterasp.net) They list the cert as : SSL-S Comodo SSL Certificate - Single Domain or Subdomain Do you know if I can use that ...
raddevus's user avatar
  • 123
0 votes
1 answer
211 views

Is it a risk running old modules on Apache?

I just saw that my hoster is running extremly old modules on Apache. The cURL Version is 3 years old, the SQLLite is from the 24th October 2014 and the zlib version is 1.2.8 instead of 1.2.11. Also, ...
user avatar
1 vote
5 answers
265 views

How to decide where to host an online store?

How can one know whether it is more secure to host the store on our own servers or on those from external vendors? Answer: Do a risk assessment. 1.) Summarized Answer 2.) Detailed Answer 3.) ...
Lizzy21's user avatar
  • 21
1 vote
1 answer
176 views

Website is under attack, how to deal with the constant requests

When i logged on cpanel this morning, i noticed tens of thousands of requests for pages that don't exist coming from a few IPs. links such as : /cgi-bin/1998, /cgi-bin/1999, /cgi-bin/2000 etc.. ...
kfj09asdufn's user avatar
33 votes
4 answers
9k views

Why are SSL certificates an annual expense?

I understand SSL certificates cost money because of reputation: most/all web browsers have a limited list of companies that demonstrated they are trusted sources of SSL certificates and therefore don'...
user1717828's user avatar
  • 2,402
0 votes
1 answer
187 views

Is it safer and more secure to buy your own online storage from a hosting service or use major cloud services? [duplicate]

If I want to have a safe, private backup of my most confidential files online, what is the best way to go? Best as in, most secure, offering the highest level of privacy (i.e. being sure my data won't ...
Neli's user avatar
  • 229