Member Avatar for samha latif

some hackers are hacking my sites again and again
can u tell me how to prevent those hackers from hacking my site...??

  • 4 Contributors
  • 3 Replies
  • 195 Views
  • 1 Day Discussion Span
  • Latest Post Latest Post by Web360-Pete

Dani AI

Generated

Quick, prioritized checklist for — is right to involve the host, ’s move to better hosting can remove noisy compromises, and ’s point about CMS-level protections is helpful. The steps below build on those suggestions with a practical order to follow.

First priorities: reduce the attack surface and keep everything patched. Update your CMS core, themes, plugins, OS and server packages; remove unused extensions; test updates in a staging environment; enforce least‑privilege for database and system accounts; use strong unique admin passwords and enable two‑factor authentication; restrict admin access by IP where feasible. These actions prevent many repeat compromises. (owasp.org)

Application and triage: avoid building SQL or command strings with untrusted input — use parameterized/prepared statements and strict input validation/encoding; enable file‑integrity checks and malware scanners; centralize logs and add alerting for unusual activity. If you confirm a breach: isolate the site, preserve logs, rotate credentials, and only restore from backups after verifying they are clean (scan for backdoors first). (cheatsheetseries.owasp.org)

Perimeter and recovery: serve the site over TLS (HTTPS), place a Web Application Firewall or ModSecurity with a proven ruleset in front of the app to block automated exploit traffic, and keep automated off‑site backups plus a simple incident‑response playbook for containment and recovery. Ask the host for server‑level logs, rate‑limiting, IP blocks and snapshots — host cooperation is often the decisive factor in stopping persistent attackers. (letsencrypt.org)

If ongoing help is needed, prioritize a forensic cleanup or a reputable cleanup service rather than repeated self‑repairs; repeated re‑infects usually mean a hidden backdoor or compromised credentials remain.

Recommended Answers

All 3 Replies

Member Avatar for Dani

I am going to go out on a limb and assume that you manage your site yourself, possibly on a shared hosting account. Work with a systems administrator at your hosting company to buckle down your server. Explain to your host that it is in their best interests to devote time to helping you, since it is compromising their network as well.

Member Avatar for canadafred

oh that happened to me once, knocked down 10 of my sites. I moved to a better server.

Member Avatar for Web360-Pete

If you are using a content management system like Joomla or Drupal, or a blogging/CMS platform like Wordpress, check out their websites for modules and plugins to improve security. I use WP on a few of my site and have BulletProof Security installed. The plugins protects a website from XSS, CSRF, Base64_encode and SQL Injection hacking attempts.

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.