Question

How can i protect my website ?

How can i protect my website for phishing , spamming and hacking , someone try to add code and trying to login in my website , how can i protect my website ?


Submit an answer


This textbox defaults to using Markdown to format your answer.

You can type !ref in this text area to quickly search our full set of tutorials, documentation & marketplace offerings and insert the link!

Sign In or Sign Up to Answer

These answers are provided by our Community. If you find them useful, show some love by clicking the heart. If you run into issues leave a comment, or add your own answer to help others.

alexdo
Site Moderator
Site Moderator badge
April 10, 2020
Accepted Answer

Hello, @johnallen12345

This is a really interesting question and the answer for this is definitely not short. A lot of things can be be done in order to protect your website and I will try to mention the ones that are most important.

You can start with your server and make sure it’s secure and not running any outdated and vulnerable software. You need to update your packages frequently (if your application/website does not require specific version of certain package).

I will recommend you to check this two articles for securing your Linux server:

https://www.digitalocean.com/community/tutorials/an-introduction-to-securing-your-linux-vps

https://www.digitalocean.com/community/tutorials/7-security-measures-to-protect-your-servers

It’s essential to make sure your server is secure and then you can further tweak the configuration to protect your website from attacks. You can make sure all of your passwords are secure and use ssh key based authentication to your server.

When it comes to website security there a important things you need to follow. You can make sure that you do not have any directories or files with 777 permissions because this can be used to exploit your website. The folder and file permissions can be different because some website’s CMSs or frameworks may require different permissions, but having 755 for your directories and 644 for the files will be good enough.

You can also disable the website’s directory browsing as this will protect you from people looking at what you’ve uploaded to your droplet. It also comes handy to protect your private data (non website’s files like backup files and etc) from being crawled from search engines.

If your website is using any additional software like plugins, modules and etc make sure that they’re always updated, because updates often include security patches.

Depending from your web server you can secure the admin area of your website with password protection or keep it available for a certain IP addresses.

Hope this helps

Regards, Alex

Try DigitalOcean for free

Click below to sign up and get $200 of credit to try our products over 60 days!

Sign up

Become a contributor for community

Get paid to write technical tutorials and select a tech-focused charity to receive a matching donation.

DigitalOcean Documentation

Full documentation for every DigitalOcean product.

Resources for startups and SMBs

The Wave has everything you need to know about building a business, from raising funding to marketing your product.

Get our newsletter

Stay up to date by signing up for DigitalOcean’s Infrastructure as a Newsletter.

New accounts only. By submitting your email you agree to our Privacy Policy

The developer cloud

Scale up as you grow — whether you're running one virtual machine or ten thousand.

Get started for free

Sign up and get $200 in credit for your first 60 days with DigitalOcean.*

*This promotional offer applies to new accounts only.