Novice Tutorial: Teach you how to conduct site security inspection

Source: Internet
Author: User
Keywords Hanging Horse website security

Intermediary transaction http://www.aliyun.com/zixun/aggregation/6858.html ">seo diagnose Taobao guest cloud host technology Hall

Whether it is a corporate website or a personal site, site security is a very important template, because the site security directly affects the credibility of a website, traffic and profitability. The site was black brought the horse, hanging black chain, site content tampering, virus spread point, user information leakage and so on the problem may bring to the site, so do a good job site security detection and security maintenance are very important work.

Next, I will teach you how to test your website safely. Of course, I am here as a trigger, such as the shrimp have a better way, welcome to Pat Bricks.

The Site security vulnerability Scan

Since many sites now have SQL injection vulnerabilities, upload vulnerabilities and so on, and hackers through the site of these vulnerabilities, SQL injection for attack, upload vulnerabilities for the Trojan upload and so on. So the website security detection is very important one step is the website flaw detection, in this borrows the tool "billion think" to explain.

Billion-SI web site security detection platform, is the online site vulnerability detection tools, before all need to invite code can be registered to use, but has been open for free use, there is a need to register http://www.iiscan.com/index/register.

The already authenticated website URL fills in the scan column, according to the actual situation will output the report and the scanning choice is good, Ann adds the task to run can. The "All option" is generally available.

After scanning, you can view the site's vulnerabilities and existing Web pages, can be based on the recommendations of the report to patch, but please note that the code to modify the page before the backup work.

  

Note: For the discovery of the site vulnerabilities to timely repair.

Second, the Web site Trojan detection

It's a common thing to have a horse on a website, and it's also a headache. So web site security detection, whether the site is hanging horse is an important indicator.

In fact, the most simple test site is the behavior of horse hanging, very simple, directly open an anti-virus software, how to see if there is no horse tips on it. Of course, there are direct to these anti-virus software to establish the site Security Center, directly submit URLs for Trojan detection, in this case of rising:

In Browser input: http://union.rising.com.cn. Rising cloud Security Web site to enter the alliance, the direct submission URL can detect whether the site has a horse behavior, if the site is hanging horse, will also be prompted to hang the horse's position.

  

Description: The site is hung horse is seriously affected the credibility of the site, it has been hanging horse, please temporarily shut down the site, timely cleaning Trojan.

Third, the website Environment detection:

The Web site environment includes the security environment of the server on which the site resides and the security of the site's working environment

Many hackers hacked the site because of the attack on the server, stealing user information. So select a server to choose a guaranteed service provider, and stabilize the server to optimize the site and SEO is also very helpful.

and the webmaster or maintenance of the environment is also very important, if the system there is a trojan, then the theft account becomes very simple. So to keep the system safe, can install rising, Kabbah these anti-virus software, there is the account number and password to set up a bit more complex.

Iv. Other Testing

Black chain detection, because now the black chain profit is very high, so now more hackers to invade the site is to link, and the black chain will seriously affect SEO optimization.

Specific test methods:

Webmaster tools can be used inside the tool network in the "Dead link on love/whole station PR query" option,

Will detect the site analysis bar, select the "Outbound link", press the "Show link" button, will list a pile of outbound links, in which you can see those links are relatively low PR and relatively unfamiliar links may be black chain, the black chain can be deleted.

  

There are other such as: whether sensitive content has been tampered with (if the contact method has been modified) and so on need to detect.

These are some Web site security detection methods, hope for everyone useful. All of the above tools are used for free, and this method is more suitable for the use of some personal webmaster. If the above content is wrong please correct me.

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.