Trojan Guard

Website Maintenance & Security-101

Many people feel that because they think no one wants to compromise their website they don’t need to worry about its security. Stop it.


Staying online with a website is a great way to attract more customers for any business & establish a strong, authoritative presence on the web.On the other hand, once your website goes live, your site automatically becomes a source of vulnerability.

How to Stay Secured?

It is critical to keep an eye on your website, perform regular website security maintenance, and stay up-to-date on security threats.

Security is arguably the most important aspect of your website presence, so here are a few tasks for maintaining or improving your website security. These should be done at least quarterly.

 

Backup All Essentials

Backing up your website content files, folders & database is and should be the number one priority of our maintenance strategy. This would further ensure your content can be replaced in event of any unforeseen compromise or an instance of data loss. Backups should be done as often as the website is updated with fresh content or before any maintenance exercise for the website.

Review all file and directory permissions

It is very vital that you make sure access to specific website files and folders is granted only when needed. Always ensure that files and directories are owned by the appropriate system users. In most cases, the web server will need access to some directories. But by limiting the web server’s rights to most of your installation, you can mitigate a possible attack.Setting permissions for files and folders can be done within your control panel.
A How to Guide would be treated in our next blogpost edition

“Many people feel that because they think no one wants to compromise their website they don’t need to worry about its security. Stop it. Although they may not want any of the information on your site, most of the time your site will be used to spread viruses, spyware, or deceive your visitors into going to sites with them. st compromised sites we see have malicious code injected into the files in order to do just this. Always pay attention to your Website & if you cannot handle on your own, ensure to be untop of your web developer to carry out relevant maintenance.”

 

Upgrade/Update CMS core and plug-ins

Keep in mind that within the rest of your site’s code some core plug-ins may “break” when you upgrade them.Leaving your CMS plug-ins outdated becomes a sure way for your website platform to become compromised.Ensure to Review all plugins for compatibility with the latest version of you Content Management System core(Joomla, WordPress, Drupal, Magento, etc). Be prepared to roll-back (remember the backups?) or postpone upgrade.

 

Review custom themes & 3rd party plugins

In many web development cases, though your theme may be custom-coded for your site, as some 3rd party plugins, even these rely on some open-source code. A great example is TimThumb, a thumbnail library: it is popularly used by many themes, including WooThemes. A vulnerability was discovered last year, but thanks to their development team, this was detected on time and all users notified. It is important that your website themes have adequate technical support from the developing company you purchase from. Also ensure to always update any javascript libraries.

As these issues may sound extremely “techie” for a novice, we advice you ensure to ask your webmaster or developer to always carry out this task.

 

Always Review all users and passwords

Ensure to always Update passwords, including the admin passwords for both your website control panel, as well as your Content Management System back end. If possible, use SSL for admin tasks or logins. Disable or remove stale users (such as ex-employees, old website editors or webmaster )

 

Ensure to install other website security tools

There are also automated website security tools which are vital to always safeguard your website against unauthorized access or intrusions. Some of these Security tools include Codeguard, SiteLock, SSL certifcates, Form lock, etc. Detailed functions and security coverage of some these are readily available for purchase and installation at no extra cost on the Web Indices platform