Member Avatar for Synergy_1

i own a website for my business and i really like to understand and implement security practices for my website.

  • 15 Contributors
  • 17 Replies
  • 367 Views
  • 6 Months Discussion Span
  • Latest Post Latest Post by Ja sa bong
silverrr_btc commented: you must install SSL certificate , use cloudflare and keep strong passwords +0
suwaidi commented: This encrypts the data transmitted between your website and users, protecting sensitive information like login credentials and payment details. +0
Talk With commented: ll an SSL certificate to encrypt data between your website and u +0
Ahsan_38 commented: Securing your website is crucial to protect sensitive data and maintain trust with your customers. Here are some essential security practices: +0

Recommended Answers

All 17 Replies

Member Avatar for Dani

That's an incredibly broad question. A web app needs to be hosted on a web server that has some amount of security. If your website has a login system, that needs to be secure. If your web app connects to a database, the queries need to be written in a secure way. I'm not quite sure that I understand the scope of your question.

Perhaps if you give some more context as to what type of security you are concerned with?

commented: Thank you for your insightful comment, which helped me understand various aspects of web app security and provided valuable insights for my inquiry. +0
Member Avatar for sgtamilan

The best way to protect your website is by using SSL encryption, strong passwords, regular updates, and a reliable web application firewall (WAF) to block threats.

Member Avatar for Bunker

Keep software updated. Regularly update your website platform (e.g., WordPress, Joomla) and plugins/themes to patch security vulnerabilities and protect against cyber threats.

Member Avatar for sgtamilan

Multi layered security is the best way to protect your website use strong passwords, implement SSL encryption, regularly update software, employ a reliable firewall, conduct frequent backups, and utilize two-factor authentication. Stay vigilant and educate yourself on emerging threats.

Member Avatar for Dec0mpiled

As Dani has already mentioned, this is a very broad question and depending on what software stack you are running, it may require different steps to secure your platform. In general, use servers that are not exposed to the open internet, you may use something like CloudFlare to serve your content to the end users. All internal servers should only be accessible through a VPN and all services inside should only allow login with a keyfile, because passwords are unreliable and not secure. Manage user permissions properly, everyone should only have access to what they NEED.

Force strong hash algorithms, like Argon2id. Use secure database query statements, like prepared statements in PHP. Keep your codebase up to date and your dependenices minimal. Have the security managed by a professional because people online only rarely know what you need.

Member Avatar for suwaidi

This encrypts the data transmitted between your website and users, protecting sensitive information like login credentials and payment details.

Member Avatar for Pelorus_1

Ensure the security of your website by implementing SSL/TLS for secure data transmission, regularly updating software to patch vulnerabilities, and using a Web Application Firewall (WAF) to filter out malicious traffic. Additionally, make sure to establish strong password policies and conduct regular security audits to identify and address potential risks.

commented: which Web Application Firewall (WAF) is the best in your experience +0
Member Avatar for sgtamilan

Fantastic advice on safeguarding your website! Your tips are invaluable for ensuring top-notch security and protection. Thanks for sharing such expert insights to keep our online presence secure!

Member Avatar for m2host

SSL, Firewall and DDoS protection must be in your web hosting plan. Additonaly you can use 2FA (2 Factor Authentication).

Member Avatar for DEEPAK_84

Hide login URL and password protection.

Member Avatar for Dani

Hiding the login URL does not really do very much of anything.

Member Avatar for MarcoMon

I wanted to ask the same question too. The practices i make (SSL, Security Headers, XSS Protection, and sanitation of inputs). And yet there's still a lot of things to cover.

commented: yes apart from what you mentioned theres a lot of things but i dont know what to do and where to start from. +0
Member Avatar for adwinafram

The best way to protect your website is by using SSL certificates, regular updates, strong passwords, and robust security plugins.

Member Avatar for scope_2

Install an SSL certificate to encrypt data exchanged between your website and its visitors. You will be able to protect sensitive information and improve your user's trust at the same time.

Member Avatar for Heatman

Adding to what other people have said, it's also very important to back up your data from time to time in case anything happens. You will still have access to your data. Please back up manually if possible.

Member Avatar for cpvr

You can also setup two factor authentication for your cpanel account, so you’re the only one that’s able to access it.

Member Avatar for Ja sa bong

Anyone who's smart will never use a website with an expired SSL certificate. It's very important to have this active on your website at all times.

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.