|
A shared web host runs multiple domains or websites on a single server, with each website sitting on its own section or partition of the server. While this sharing of web server space is extremely convenient and cost-effective as the cost of server maintenance is split amongst many sites, it also means security in a shared hosting environment is that much more important.
Here are some steps you can take to ensure your shared hosting website stays secure.
1. Change password frequently in cPanel. |
Changing your password regularly helps to keep your security up-to-date and minimizes your risks. If a malicious user has been able to gain access into your account, that person will be shut out. It's recommended that you change your password every 30-90 days. Click here to watch a video tutorial on how to change your password in cPanel.
Consider these basic dos and don'ts for choosing the right password:
|
Make your password eight characters or more long.
|
|
Use a combination of upper and lower case letter, numbers, and symbols.
|
|
Use the cPanel password generator to generate cPanel passwords.
|
|
Avoid sequences or repeated characters.
|
|
Avoid common and dictionary words.
|
|
Do not use personal info for passwords. |
Remember, don't store your passwords online. If a malicious user is able to hack in and find all your passwords online, he/she will have access to all your information.
2. Be aware of script exploits. |
Be careful of the kind of scripts you use. Malicious users can insert special characters into a web page, and the browser will unknowingly process them as part of the page.
While the tampering can be as trivial as an annoying pop-up message, it could also steal cookies, steal user input like username and password, delete information from a database, or even compromise the user's computer.
Experts agree that the best defence against script exploits is simply to never trust user information, and to assume that any data posted from a browser can contain malicious script.
To protect yourself against script exploits, it's a good idea to subscribe to script updates, and to also learn how to apply html coding to strings.
3. Use secure environment (SSL) if you are collecting personal info or have any databases. |
A Secure Socket Layer (SSL) certificate is the lock and key system you see in online stores. An SSL certificate is essentially a secured communication channel, which encrypts the information over the internet, so information cannot be stolen or misused. An SSL certificate changes the browser from http:// to https:// indicating the surfer is in a secure connection.
If you are setting up an online store, you will require a dedicated (or shared) SSL certificate for your online store. Contact HostPapa for information and options of obtaining your SSL certificate.
4. Ensure your spam and virus protection is up-to-date. |
Your anti-virus and spam protection programs are only as good as their latest update. New viruses are released every day; this is why it is crucial to check for updates on a regular basis. Most virus protection programs also offer an automatic update service in which they automatically download the latest updates to ensure your computer is 100% protected 24/7. In this case, it's important to keep your live update subscription active.
Back to Tips & Tools |
