Questions tagged [web-hosting]
A type of service that allows a website to be made accessible via the internet. Web hosting can consist of storage space plus access to a website running a variety of technologies all the way up to fully dedicated servers provided by a third party.
124
questions
0
votes
1
answer
97
views
HIPAA Compliance for Frontend Hosting
I am using a non-HIPAA-compliant vendor (Vercel) for the hosting of my site. This includes serverless functions on Vercel's infrastructure that serve HTML/CSS/JS. However, the entire backend/database ...
- 143
34
votes
4
answers
9k
views
Domain about to expire. Afraid that new owners will spread malware
I have a domain that is about to expire. It was used for hosting my freeware which I do not maintain anymore but can still be found on shareware directories. The application points to my domain (...
- 2,483
1
vote
1
answer
78
views
Do web-hosting sites like Heroku or Railway expose your database?
I was watching this video https://www.youtube.com/watch?v=Qm7k1CPFkIc about how to steal passwords and the guy mentioned that you can use shodan.io (a site that lists various devices connected to the ...
- 115
2
votes
0
answers
36
views
Renew a web hosting certificate on IIS [closed]
I have a site published in IIS. The site using HTTPS protocol and the web hosting certificate is already expired. This web hosting certificate path is under the trust root certificate which is not ...
- 21
1
vote
2
answers
140
views
Should I worry? Web hosting mailed me my details and returned my password (unencrypted) and IP logged
Unfortunately, I've tried a hosting service and it returned my password value as it was in my inbox (as connection details).
I went to a control panel in an attempt to delete or deactivate my account. ...
- 13
0
votes
1
answer
142
views
Securing home hosted servers (opening ports vs tunnelling)
When it comes to securing your home hosted servers, the most common advice appears to be:
1.Have a VPS with a reverse proxy
2.Tunnel to your home network from the VPS using a VPN like Wireguard
...
1
vote
1
answer
99
views
Security concern with hosting a chrome extension on a public server
We have chrome extension that is for internal use by our clients. It is force-installed via enterprise policy. So far, we have it published on the Chrome WebStore but we need to move off of it due to ...
- 111
0
votes
0
answers
48
views
Are these cPanel processes malicious? [duplicate]
I have previously asked a question There's an expect.php file in all the git repositories of my web server, is this malicious? and this question is a further continuation if it.
After investigating ...
- 296
0
votes
1
answer
36
views
Recommended secure option for uploading files to web server from a dynamic IP?
I need the best way to access a webserver to upload/modify a PHP script. The website contains very sensitive information, gaining unauthorized access to this server and modifying files would lead to ...
- 111
2
votes
0
answers
242
views
All private subdomains found and listed, including those from my home IP
It's been my understanding in the past years that it's not easily possible to find out all the subdomains of a domain (unless these are used publicly, like in hyperlinks, etc), and likewise not easily ...
- 215
0
votes
1
answer
223
views
Can the hosting provider who has access to the email server machine, access the emails?
I am planning to use a self hosted (Linux based) email server. However, the server will be on hosting providers machine. The hosting providers will have access to the physical machine. In that case, ...
- 137
1
vote
0
answers
99
views
Is hosting your own website safe? [closed]
So I made this website on python with Flask. I want to host this website on a rasberry pi on my own home network which everybody in my family uses.
Should I?
Is it safe?
- 11
1
vote
2
answers
141
views
Is the idea of a hosting provider with built-in DDoS protection plausible? [closed]
Any PaaS/shared hosting company which I came across offers its customers to protect their websites from DDoS via security-oriented CDNs such as CloudFlare or CloudFront which act as a proxy ...
- 13
1
vote
1
answer
132
views
Can we detect other websites of a user on a shared hosting?
I use a shared hosting plan which allows me to add multiple websites with one account/purchase. I have one website in the same plan for my work, and one for personal works. I can see both of them in ...
- 113
0
votes
1
answer
185
views
Can attack to a website from a parked subdomain with different hosts?
I have a website like maindomain.com that is hosted on one IP address like 192.168.1.1. I want to add a subdomain from a different host (such as 192.168.1.2) to my root domain (maindomain.com), such ...
- 101
0
votes
1
answer
1k
views
Why can I still receive email at my old domain after someone else bought it?
My domain expired years ago and was registered by another party.
I have already read Can someone read my E-Mail if I lose ownership of my domain? and see that the answer is yes.
Now if someone buys ...
- 3
0
votes
1
answer
131
views
How to find out where a website is hosted?
I would like to find out where a website is hosted, in other words where the server/datacentre is located and the name of the company that provides the hosting. I have used the various websites that ...
- 23
2
votes
2
answers
2k
views
What is the best file permission for .user.ini in hosting folder?
My hoster placed a .user.ini in my public_html. What is the recommended file permission be? Now it's 644.
- 35
0
votes
2
answers
201
views
Security a Linux VPS: is the "standard advice" enough?
Like so many others, I'm an intermediate web developer who is starting to get into the security side of things and I'm looking to start running a Linux VPS (Debian). For years, I've resisted the move ...
- 141
0
votes
1
answer
294
views
Are the following two ways to obtain server certificates for web servers to host web applications?
https://www.digitalocean.com/community/tutorials/how-to-serve-flask-applications-with-gunicorn-and-nginx-on-ubuntu-18-04#step-6-%E2%80%94-securing-the-application says for running a flask web ...
- 637
1
vote
1
answer
205
views
Risk of getting MySQL database compromised with a client application
I want to make a client-side, Windows-based application that allows the user to register and it will store the registration details in an online MySQL server.
However when i googled ways to do this, ...
- 133
1
vote
1
answer
176
views
Would my IP be recorded when I visit a website
Could the website owner (admin) determine whether to record users IP?
If the website owner (admin) doesn’t want to record users IP, will the host provider or domain name provider still get and record ...
- 133
1
vote
0
answers
117
views
Hosting password compromised [closed]
Last Monday I received two emails from my hoster:
10h42: Connection notification
10h42: Confirm your notification
I didn't login that day, so I knew something was wrong. I immediately logged in, ...
- 119
2
votes
3
answers
659
views
What are the techniques to know if VPS cloud hosting provider is accessing my data?
Immutable laws of security: https://fossbytes.com/10-immutable-laws-security-microsoft/
If a bad guy has unrestricted physical access to your computer, it’s not your computer anymore.
I understand ...
- 555
133
votes
3
answers
15k
views
Is HostGator storing my password in plaintext?
I want to bring this up to HostGator, but want to verify my suspicions before making a big fuss.
I asked a customer care representative to help me add an SSL certificate to a site I host with them. ...
- 1,917
1
vote
0
answers
282
views
127.0.0.1 host header injection
I would like to know if this configuration is vulnerable to host header injection. I think it isn't, because it's listening on localhost, but I'm not sure.
<VirtualHost 127.0.0.1:[% port %]>
...
- 11
0
votes
2
answers
315
views
How to check if a list of domains contains any WordPress installation?
Does any software or any other way to detect if a website contains any WordPress installation?
For example lets say we have the website example.com which is not a WordPress site, but we have a ...
- 157
0
votes
3
answers
192
views
Security concerns on hosting server
Few years back I hosted my website on godaddy but I was not that tech savy so they (customer care people) assisted me on hosting the website on their shared hosting server. Since then I am on a ...
-4
votes
1
answer
113
views
Are my website visitor's protected more if i use a vpn while self-hosting website [closed]
I installed a VPN and started configuring my website to use the VPN addresses, but will that add a stronger layer of security for my website visitor's?
- 105
0
votes
1
answer
114
views
Is dedicating ips for each domain better than sharing one ip?
Would sharing an ip for multiple domains cause any kind of security problems? Imagine there are multiple domains which should be hosted on a server. Which is more secure? Sharing one ip for all the ...
- 3
3
votes
3
answers
452
views
Suspicious "100% guaranteed" web hosting security package
Notes: I have very limited knowledge and experience in this field. My boss does not want to spend a penny more that what we already paid for. The website has a form that sends a message to our email ...
2
votes
0
answers
834
views
Digital Ocean WordPress droplet security precautions
I'm a front-end and WordPress developer. A week ago a number of my sites got hacked on shared hosting.
The sites were built to a high standard, from scratch, using Underscores. I only use a small ...
- 176
6
votes
3
answers
4k
views
My sites have been hacked by cpamatik.com , it passes all security checks with Google and Sucuri, but still redirects, any idea? [duplicate]
Almost all my sites got hacked by cpamatik.com virus
All CMS were up to date, plugins, modules etc..(Drupal and Wordpress) , some sites I have logged in to work on, but some sites I haven't touched ...
- 193
2
votes
2
answers
3k
views
Dealing with the dangers of self-hosting a webserver?
Assuming for a self-hosted webserver:
the webserver only hosts a static html website
iptables is used to reject every IP except a few known ones
only Port 443 is forwarded and the website requires ...
- 51
6
votes
1
answer
610
views
Find Security Flaws in My Payment Page
I've done some extensive research about how to secure your website from card fraud.
iFrames do a pretty good job of this, however, It can still be worked around from certain exploits.
Many payment ...
3
votes
0
answers
338
views
Why exactly are self hosted websites deemed that dangerous? [closed]
Up to now I'm using a raspberry pi as a local server for trying out things or hosting my own little projects (beginner level), but I want to make it publicly available (most likely only for people I ...
- 51
1
vote
0
answers
106
views
How to tell if my hosting data is valid or a fake copy
I'm investigating an issue where we have consistent performance issues with our company web host and bad statistcs data in our hosting console. Our hosting provider console says our IP address is one ...
user181829
1
vote
1
answer
2k
views
dangers of using WAMPServer on my home PC?
Hello there I have been working on (learning) web development and have gone down the route of self hosting at the moment. I have a website which I've made, it doesnt have any user interface for input, ...
- 113
13
votes
4
answers
5k
views
Accessing multiple sites via HTTPS produces different, unrelated content (Peugeot club via HTTPS)
I've come across a random website Moodoo.cz. The interesting thing is that if you access it via the HTTPS: Moodoo.cz, the content completely changes. It is not that unusual - I guess server can serve ...
- 240
-1
votes
1
answer
501
views
hosting multiple websites on a single VM securely [closed]
I'm trying to deploy a server to host a multiple web application, I've done some research and found the hypervisor is the solution but i think it will generate some issues because VM hypervisor on a ...
- 195
0
votes
1
answer
141
views
Experiencing injection / brute force attacks
I'm handling a hosting services for website via WHM. Few months ago, I've been experiencing some automated attacks on the websites that I'm handling. See screenshots below:
Are there any remedy for ...
7
votes
2
answers
2k
views
Manage SSL certificates for a multi-tenant website
We have given customers the option to allow custom domains which ultimately point to our server by changing the CNAME.
Some of our customers would like to have SSL enabled to their domain but I am ...
-3
votes
3
answers
5k
views
Why can I access a website using its domain name but I cannot when using its IP address directly? [closed]
For my target domain e.g. www.domain.com I find the ip address with ping command but if I browse directly the ip address I obtain an error page. How is it possible? I know that problably the service ...
- 139
2
votes
1
answer
1k
views
Can I use the same ssl cert to protect my web site and sign my app?
I'm considering buying an SSL cert from my web host provider (smarterasp.net)
They list the cert as :
SSL-S Comodo SSL Certificate - Single Domain or Subdomain
Do you know if I can use that ...
- 123
0
votes
1
answer
164
views
Is it a risk running old modules on Apache?
I just saw that my hoster is running extremly old modules on Apache.
The cURL Version is 3 years old, the SQLLite is from the 24th October 2014 and the zlib version is 1.2.8 instead of 1.2.11. Also, ...
user160241
1
vote
5
answers
245
views
How to decide where to host an online store?
How can one know whether it is more secure to host the store on our own servers or on those from external vendors?
Answer:
Do a risk assessment.
1.) Summarized Answer
2.) Detailed Answer
3.) ...
- 21
1
vote
1
answer
153
views
Website is under attack, how to deal with the constant requests
When i logged on cpanel this morning, i noticed tens of thousands of requests for pages that don't exist coming from a few IPs.
links such as : /cgi-bin/1998, /cgi-bin/1999, /cgi-bin/2000 etc..
...
- 11
33
votes
4
answers
9k
views
Why are SSL certificates an annual expense?
I understand SSL certificates cost money because of reputation: most/all web browsers have a limited list of companies that demonstrated they are trusted sources of SSL certificates and therefore don'...
- 2,392
0
votes
1
answer
165
views
Is it safer and more secure to buy your own online storage from a hosting service or use major cloud services? [duplicate]
If I want to have a safe, private backup of my most confidential files online, what is the best way to go? Best as in, most secure, offering the highest level of privacy (i.e. being sure my data won't ...
- 229
3
votes
0
answers
135
views
Can I trace malicious email sent through a cloud hosting service?
Around the time my phone started acting like it was hacked, I was sent a suspicious email that opened automatically into a website without clicking on anything. I tracked it to a cloud hosting service....
- 31