Although the digital age has provided us with all kinds of benefits we probably couldn’t live without, it’s also served up a number of challenges too. By far, the biggest of these challenges is probably the risk to digital security. Keeping your server secure is just as important as the security you would employ on a building. In some ways, it may even be more important, considering all the information (social security numbers, customer credit card numbers, payroll figures, etc.) that could be potentially harvested from a hacked server. The following five server security mistakes are ones you should avoid making to keep hackers at bay.
Changing File Permissions
A lot of the server security mistakes you’re making probably started with good intentions. For example, if you install scripts on your server, it’s to be expected that you may have to set permissions for at least some of the folders.
Usually, this gets done with a CHMOD command via some FTP program. However, if you find that getting the settings correct is a challenge, like a lot of people, you might end up setting all of your folders to the most accommodating setting possible, 777.
The problem with doing this is that hackers now have extremely easy access to your folders. It’s like keeping the key to your front door outside and in plain sight.
Fortunately, most servers already come with quality default permissions. You should only have to change them in rare circumstances.
Wildcard Indexing
One reason you’ll need a server is for your website. This is where you’ll probably have a folder that keeps all your audio files, images and page files that don’t show up on the web.
That’s all fine, of course. Just be sure that when you try to visit your root directory, you get a server error. For example, when you type in “/pics†after your homepage’s URL, you should receive an error 403 or 404.
If you’re successful in visiting your root directory, something has gone wrong. A list of the directory’s files will be displayed and this can potentially open up your server to hotlinking, leeching and exposing even more of the directory tree as well.
To turn off indexing for those folders, either edit your .htaccess file by adding a file you name “index.html†or, for those using cPanel, go to the Index Manager for disabling indexing.
Outdated Software
There are a number of reasons your software may need updating. Of them all, the most important is that if you don’t update it, you can be exposing yourself to risk unnecessarily. This is especially true when you consider how easy it is to update your software. Not doing it is a huge mistake that could cost you dearly. Everything from password hacks to database injections can occur when your software becomes outdated.
Forgetting about Backups
Although picking the right server should keep your information safe, having backups is still important. If you run your site off something like WordPress, all you need is a plugin to keep your information backed up.
For other sites, something as simple as logging into it through FTP and downloading everything right onto your hard drive is all it takes.
Bad Passwords
Don’t drop the ball because of your passwords or those of your staff lack in quality. Instead, use a password generator and change them regularly. Doing this will make it incredibly difficult for a hacker to compromise your privacy.
At ServerPronto, we don’t just specialize in servers and hosting. We are also specialists where server security is concerned. Let us know if you need help in any of these critical areas. Our expertise is at your disposal.
ServerPronto offers the best affordable and secure hosting service in all dedicated server packages.
Sources:
10 Common IT Security Blunders (and How To Avoid Them)
Photo cred: Flickr /Â GotCredit
Comments are closed.