[Project Management] record a Q & A about website security during the Project Review

In a free Q & A session at a project review, when asked by relevant experts to ensure the security of the website, I feel that the answer is not very well adjusted, so I will sort it out in the blog.

1. Server Security
2. Website Security

 

Server Security:Disaster Tolerance backup (with RAID card installed), software and hardware firewall (Port listening), sqlservice settings (port setting), sqlservice proxy (regular database backup), FTP (port setting), synchronization software (synchronize website data), Windows scheduled tasks.

 

Website Security:SQL anti-injection, foreground (Web) and management (Web) separation, background (Web) login page (Verification Code), user management (Prevent the use of weak passwords ).