You may think that web hosting hacking is something that happens to someone else, but be forewarned: it can and does happen to everyday web hosting accounts out there, particularly on shared servers. To think that you can simply not think about it, or that you may be small potatoes; why would anyone come after your site is naiveté at its worst. Here are some simple methods to ensure that your own web hosting account is as secure as it can be.
So why does a hacker want to infiltrate and plunder your site? There are many motivations, and none of them are good. Some of the more common reasons include theft of sensitive data including financial information such as online banking details, passwords, account numbers, credit card information, for not only you but also your customers if you have an ecommerce site (a real nightmare; and one that can put you out of business fast!)
They could be stealing bandwidth to carry out activities you couldn’t begin to imagine, and leave your site holding the bag when authorities figure out where it’s coming from. They may hijack your email accounts, and start sending spam all over the web.
Some might be injecting hidden links into your pages to improve their search engine rankings. Or worse, to harm yours!
Ways to Protect Your Site from Web Hosting Hacking!
Don’t allow users to upload using Telnet or FTP. Both of these are far less secure than either SSH and SFTP.
Make sure your web host is using the latest versions of software, and has kept their security software up to date, as well as the usual anti-malware, firewalls, and other essential security measures. This is non-negotiable. If your web host can’t be bothered to keep your hosting platform as secure as possible, then you can’t be expected to stick around! Move to another host ASAP!
Make sure any passwords are secured, and changed often. Also, make sure they are not guessable. Don’t store passwords in simple text files, and practice safe surfing: don’t leave windows with sensitive information open on your computer when you’re not using them. Someone else will!
Backup your site regularly. This should go without saying, but the majority of site owners don’t bother, much to their chagrin when they are left to reconstruct an entire web site from memory. Make sure to make multiple backups, with one off site entirely.
Problems often come packaged in script and software downloads. In particular WordPress plugins and themes are a rich place for hackers to place exploits that can easily find their way into your site. Make sure you are getting these from a reputable source before you allow them on your hosting space.
Make sure your web hosting support takes security seriously. Recent hacking events at GoDaddy, Network Solutions and DreamHost plus a few others only amplify the need for vigilant web hosting security. It is as much up to the client as it is the web host. Make sure you do your part to make your site safe from web hosting hacking!
