What precautions do you take to prevent your site from being hacked?

[Sharon]

I'm just curious to know what sort of precautions different webmasters take in order to ensure that their website is not ever hacked. Nothing is more discouraging than discovering that your community or website has been vandalized by hackers and in some cases I know some people just give up because they neglected to do a backup and starting from scratch just seem so daunting. Any advice for others in this area?

 

[Darthmaul]

I didn't really do a whole lot when I owned my forum. I trusted that the forum software I was using was secure, and no files were exposed in my server directory. Additionally, my admin account had a very complex password that would be pretty much impossible to figure out. Other than that, I made sure nobody that I didn't trust to have a secure account gained admin permissions. Through all that, I was never hacked so I guess you could say it worked.

My main suggestion would be just make sure you have a secure software and password for your account

 

[Hikari_Al3x]

i currently have ssh keyfiles on putty, with plaintext passwords disabled. we also are sure to update server software asap.

oh yeah, the site is also using an SSL certificate via let's encrypt.

 

[Steve Jobs]

Keep the software up to date, and I use a plugin for Wordpress to secure my website. SSL is on for payments.

 

[Openstudio]

I do have a SSL certificate on my whole website 🙂
but not on my forum

 

[P0seidon]

Ensure you have good SQL database encyrption, administrators and moderators passwords are long. Also have another login method to the ACP like a puzzle, phrase passaord or anything you can think of

 

[Limpia]

Keeping and making good backups is the most important thing. Even if some hackers don't do something,
some times thing just go wrong. With a good backup, no need to worry.

 

[Deleted member 32117]

I heard my name and here I am 😛. Tbh honest to prevent a hack I probably would use SSL or CloudFlare but that does not work I would probably talk to the support group for the forum

 

[Gus]

Don't use the same password everywhere.

Your forum's admin account especially should have a unique and complex password that you don't use anywhere else on the internet.

 

[Page]

I tend to have an good firewall and use different passwords on the front end and back end of the site. And the password on the admin are very long also