5 Step away from the right to fall horse--virtual host article

Source: Internet
Author: User

Intermediary transaction http://www.aliyun.com/zixun/aggregation/6858.html ">seo diagnose Taobao guest cloud host technology Hall

Today's Chinese internet has been a universal SEO era, today's Internet security form is not optimistic, a variety of hacker tools have almost "fool", however, in this game of interest in the real loss of these grassroots webmaster, the server was invaded, the site hanging horse, data loss, Search engine down right or even K station ... Here Myhuwai security engineers want to give the general grassroots webmaster a little web security advice, if you can really perform to their own website management work, I believe we can get better results.

This article mainly elaborates the security configuration of the virtual machine host from 5 aspects, and does not involve the security setting of the independent host and the VPS.

Website Code Safety self-test

This is the most important and difficult part, because not all of the webmaster have scripting ability, so we recommend that you try to choose the most well-known site core (dedecms, DISCUZ, Phpwind ...), because the developers of these site kernels have superb scripting skills and experience, Basically, there are no big problems to be guaranteed. But if you really need to choose some unknown kernel, it is very necessary for their own site to do a simple security self-test, in fact, the method is also very simple to download some injection vulnerability scanners, the domestic use of a higher frequency of a d,nbsi ... And so on. If a vulnerability is found to be repaired immediately, as you can scan, the more technologically advanced hackers and even the pseudo hackers are more able to scan.

Second, set the complex administrator password

This seems to be very ridiculous, but it is so simple and ridiculous safety measures there are many owners do not pay attention to the author has been scanning many weak password administrator password, even more simply did not change the default password. A strong password is best to include letters, numbers, and symbols.

Third, the choice of the virtual host provider

A lot of webmaster in the purchase of space time to map cheap to choose some low-cost virtual host, this is very undesirable. First, speed, stability is not guaranteed, to know speed is also one of the parameters of search engine considerations. Second, because the Low-cost virtual host provider does not have a lot of money to buy a genuine virtual host management system and hardware firewall, such as security equipment, so the security of the entire server is not guaranteed, once the server permissions have been lost, your site no matter how safe it is useless.

Iv. Directory security Settings

This point to the webmaster Technical requirements for 0, but in the overall security of the server when the use of a guarantee is particularly effective, you can fully guarantee that your site is not hung horse, although your site is flawed. The specific operation is directly into the space Control Panel to close the relevant directory write, execute permissions, the specific directory to be selected according to the type of site.

V. DDoS attack protection

This kind of security problem mainly arises from some competitors of the website, so if your site has such a problem, I suggest you buy with hardware firewall space, you can basically solve the problem, but if not yet that there is only one way, the police, hehe

Summary: Said so much is actually very superficial, because network security itself is a very advanced technology, but the basic security awareness and safety common sense must be mastered. But after all, there is no absolute security, so nip in the bud is our ultimate goal.

Finally (www.myhuwai.com) welcome you to visit, for the above security technology we will also on the blog and everyone technical discussion.

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.