Portal Home > Knowledgebase > Articles Database > how to protect your website from hackers/spammers
how to protect your website from hackers/spammers
Posted by Bonnie24, 09-28-2007, 04:02 AM |
Hi people,
got my website attacked by spammers and hackers, let's share your experience how you got rid of them.
Bonnie
|
Posted by david510, 09-28-2007, 06:31 AM |
Does your server has got any control panel? To prevent web attack install mod_security on the server. Scan the server with scripts such as rkhunter, chkrootkit... Install APF and BFD.
|
Posted by Bonnie24, 09-28-2007, 07:09 AM |
Hi David, yep, my server has cPanel, thanks greatly, will inform if I fail, but I hope not!
|
Posted by bryonhost1, 09-29-2007, 09:40 AM |
Hi!
Ok..since this is me latest calling..what exactly is going on?
If I know what is happening..I may be able to help.
I'm learning myself..but I learn very quickly.
Bryon
|
Posted by The_Dominator, 09-29-2007, 11:34 AM |
Hello BryonHost -
if you have your own server look for a managed provider that can help you protect your server. dedicated servers providers typically dont help you they simply give you a server with an IP address.
that provider might have options for firewalls, monitoring, locking it down etc and helping your secure your site or servers.
with Linux there are a lot of tools out there that are good and are opensource or not very expensive - With Windows usually the prices are higher. -
but i guess first step is ask your hosting provider or server company what they can offer you and rates to do it
|
Posted by whmcsguru, 09-29-2007, 08:38 PM |
The utilities listed (sans mod_security) are more server related tools, not website related tools.
Mod_security is a huge pain in the tail end to configure right, especially with rulesets that some individuals have made public (gotroot). These rulesets lead to massive server load when multiple pages are loaded, not just in one occasion but every (50-100) I've tried to use them in, from the latest and greatest hardware (2-4cpu) to older.
How to avoid spammers? Capcha is good for this. If you run a blog such as wordpress, make sure you use akismet. If you run a forum, make sure you verify signups (email), don't let guests posts without (valid) capcha, and use things such as bbprotect on your forum.
How to avoid individual website hacking?
Keep your software up to date, patch everything, know what's going on. If you CAN, develop the website yourself, it really doesn't take that much time and effort.
|
Add to Favourites Print this Article
Also Read