{"id":23211,"date":"2020-12-09T10:07:57","date_gmt":"2020-12-09T02:07:57","guid":{"rendered":"https:\/\/web.mwwsb.com.my\/pjci\/?post_type=kb&p=23211"},"modified":"2022-09-07T18:56:27","modified_gmt":"2022-09-07T10:56:27","slug":"security-tips-website-defacement-alert-and-guide-info","status":"publish","type":"kb","link":"https:\/\/www.casbay.com\/guide\/kb\/security-tips-website-defacement-alert-and-guide-info","title":{"rendered":"SECURITY TIPS \u2013 Website Defacement Alert and Guide [INFO]"},"content":{"rendered":"\t\t
\n\t\t\t\t\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t

SECURITY TIPS \u2013 Website Defacement Alert and Guide [INFO]<\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"\"\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t

Dear Customers,<\/p>

We think that some web defacements have lately occurred and influenced certain clients in our Shared Hosting<\/a> customers. We know that some of your accounts have had a huge effect. In this context, we want to take advantage of this chance to educate clients on managing their websites to safeguard themselves against minor external threats.<\/p>

For preventive measures against hacking or injection, please refer to the following guideline. It might take you some time to complete reading the steps, but they will certainly assist you to manage a safer web site.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t

1. CMS Files Permission<\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t

Don\u2019t assume your open-source internet apps, such as CMS, are 100% secure. There are problems and mess ups or safety problems with every software. Hackers can discover them at some stage in time when a CMS has a safety defect.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t

2. CMS Application Security Updates<\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t

Don\u2019t forget to maintain yourself updated with your CMS security holes. The majority of open-source systems regularly release updates. All systems do not, however, instantly check for updates and some can\u2019t automatically install them. Keep yourself updated by joining mailing lists or following Twitter accounts of those services.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t

3.\u00a0 CMS Application\u2019s Admin Login<\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t

Do not forget who\u2019s responsible for your CMS updates. You might have used the 1-click installer of your hosting providers or maybe the CMS was installed by your web designer for you. But do they update it for you? Rarely. Remember that the update of your CMS with the latest safety patches is your responsibility. Alternatively, your webmaster, website design specialist, or website designers could outsource the job.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t

4.\u00a0 CMS\u2019s Notification & Alerts<\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t

Remember to update third-party modules. Other developers than the open-source team could have developed the modules on your CMS. These modules may include safety problems as well. Just as you have to have an update on the CMS, you also need to update the third-party modules your CMS uses.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t

5.\u00a0 CMS\u2019s 3rd Party Module and Application \u2013 Security Issue<\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t

Remember to update third-party modules. Other developers than the open-source team could have developed the modules on your CMS. These modules may include safety problems as well. Just as you have to have an update on the CMS, you also need to update the third-party modules your CMS uses.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t

6. Webmaster or Site Developer<\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t

Don\u2019t forget to work with a specialist or a supporter. It can be hard and laborious to keep your system up to date. You can save precious time and focus on running your company if you collaborate with an expert consultant who updates your open-source system. You can pay him monthly, and if available, he will update, or you can pay through the tasks.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t

7.\u00a0 Password Login Policy<\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t

Remember to have a solid password policy. This is really the biggest reason why hackers get access to systems by getting weak passwords. At least 8 characters, with numbers, letters and try to create long passwords. Do not use your name or your city zip plus. If you find it difficult to keep a long password, try to use the first letter of each word to make the password for a phrase with a certain number. E.g. \u201cThe Rabbit jumped over 4 Stones and 7 Flowers\u201d makes the password TRjo4Sa7F<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t

8.\u00a0 Database and Backup<\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t

Do not forget to always back up your entire system ( both files and databases). You assume you have it all backed by your hosting provider. Well, they do, but mistakes happen even at the largest hosting suppliers. Furthermore, the hosting suppliers\u2019 backup history is maybe only a couple of weeks long. The very first thing a hacker does when your system gets hacked is to leave a backdoor.<\/p>

After weeks perhaps months, he returns and defaces the homepage. When your hosting provider restores your system with the newest backup, the hack is still on the surface. Recall that it takes some time for your homepage to maintain and update a Free Open-Source CMS. It might be a wonderful idea to outsource this part.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t

9.\u00a0 Malware, malicious scripts in Free Templates<\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t

Many websites give CMS free templates such as Joomla and WordPress, but you may not understand that some of them have hidden parts of code in these templates that are bad. Some templates contain links that are not so friendly, and they cannot be deleted because it\u2019s part of the author\u2019s contract to use the template.<\/p>

Steps need to be taken:<\/p>

a)\u00a0To use the free template, you must keep the footer intact. The issue is that links to websites with a small or poor reputation can be found at the footer. You may discover your site in a poor neighborhood if these links do not have a follow-up This is very bad for Google and could make a blacklist of your website.<\/p>

b) Base64 code is harmful because the code is encrypted and often it is used to conceal malicious code. The code discovered in a theme model is a danger. It can also have connections to hazardous websites from malicious code. Your theme will stop working though if you remove the Base64 code.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t\t\tRead the next article: SECURITY ALERT: Website Defacement on Joomla<\/em><\/a>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"

SECURITY TIPS \u2013 Website Defacement Alert and Guide [INFO] Dear Customers, We think that some web defacements have lately occurred and influenced certain clients in our Shared Hosting customers. We know that some of your accounts have had a huge effect. In this context, we want to take advantage of this chance to educate clients […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"site-sidebar-layout":"no-sidebar","site-content-layout":"page-builder","ast-site-content-layout":"","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"disabled","ast-breadcrumbs-content":"","ast-featured-img":"disabled","footer-sml-layout":"","theme-transparent-header-meta":"default","adv-header-id-meta":"","stick-header-meta":"default","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-gradient":""}}},"kbtopic":[],"kbtag":[106],"mkb_version":[],"_links":{"self":[{"href":"https:\/\/www.casbay.com\/guide\/wp-json\/wp\/v2\/kb\/23211"}],"collection":[{"href":"https:\/\/www.casbay.com\/guide\/wp-json\/wp\/v2\/kb"}],"about":[{"href":"https:\/\/www.casbay.com\/guide\/wp-json\/wp\/v2\/types\/kb"}],"author":[{"embeddable":true,"href":"https:\/\/www.casbay.com\/guide\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.casbay.com\/guide\/wp-json\/wp\/v2\/comments?post=23211"}],"version-history":[{"count":12,"href":"https:\/\/www.casbay.com\/guide\/wp-json\/wp\/v2\/kb\/23211\/revisions"}],"predecessor-version":[{"id":36624,"href":"https:\/\/www.casbay.com\/guide\/wp-json\/wp\/v2\/kb\/23211\/revisions\/36624"}],"wp:attachment":[{"href":"https:\/\/www.casbay.com\/guide\/wp-json\/wp\/v2\/media?parent=23211"}],"wp:term":[{"taxonomy":"kbtopic","embeddable":true,"href":"https:\/\/www.casbay.com\/guide\/wp-json\/wp\/v2\/kbtopic?post=23211"},{"taxonomy":"kbtag","embeddable":true,"href":"https:\/\/www.casbay.com\/guide\/wp-json\/wp\/v2\/kbtag?post=23211"},{"taxonomy":"mkb_version","embeddable":true,"href":"https:\/\/www.casbay.com\/guide\/wp-json\/wp\/v2\/mkb_version?post=23211"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}