Today security is one of the biggest concerns of website hosting business. Any breaches may lead to serious problems for customers and as well as for the company and its structure. The prevention of both sides, service provider and client, is the surest way to avoid attacks from the less well intentioned.

Passwords! Simple and Important!

Never use the same password on multiple logins. If any password is found by some suspect, hacker, scammer, he will try the same password on other hits on your site. Never use the same password to your cPanel control panel on another site such as configuration files (config.php), because if some guy finds a way to read these files, will try to use the passwords found in the other site access . The passwords were due to be complex using uppercase letters, lowercase letters, numbers and symbols, as the following example: xU76 & 5k7

Keep up-to-date!

Make sure that the applications used are always updated to the latest versions. Blogs, shopping carts, photo albums, calendars, and basically all PHP-based scripts should submit vulnerabilities at some point in their lifetime. Keep this in mind, and subscribe to security alerts the programmers responsible for the scripts they use. The sites of most applications have forum, blogs and newsletters to keep users up to date on changes, corrections, and information stands. If you have any doubts about the security of the application you want to use.

Keep or place blank index files in directories!

It’s a good idea to put blank index.html files in all directories, so that the contents within the same is not easily visible on the web and you can also use the Index Manager in cPanel instead of the previous idea.

Not to use? Remove it!

Old facilities are invitations to unwanted entries! If you tested the last and best tool for your site and subsequently decided not to use it, uninstall it and remove all files related to this tool. It’s normal to let such tools installed which does not even make use of them in the long run these tools are not aware of updates and may be subject to any unwanted attacks.

And if your site become a “Crime Scene”?

If something happens or if spam is sent from your site, or if the files on your server , the first thing you should do is change all the passwords. Then look at your site and see all the versions of applications used. Please update if necessary. Check the error logs in cPanel control panel for any application suspect. Finally, send the information of what happened and the error logs to the web hosting provider so that they will try to get more clues, the company can verify the addresses of ip’s that came to your site to try to fix flaws.

The truth is that it can happen to anyone, even if you think that was more cautious. Any site is at risk, remember this. The key details are to use different passwords for different access and when used scripts / applications in PHP to keep them always updated.

Posted under Web Hosting Help