Web Security

Security of a website is one of the main priority is for a webmaster. But most of the webmaster only design and prioritize what topics should be provided in order to attract as many visitors.

And if a webmaster to ignore the security of a website, then the aggrieved is the webmaster's own because a hacker can retrieve important data on a website and also can even mess up the look of the website (deface) the.

Here are some common methods used by hackers to attack a website:



1. Remote File Inclusion (RFI)

Method that uses PHP script weaknesses include (), include_once (), require (), require_once () the variable was not declared properly.
With RFI menginclude an attacker can not file that is located outside the respective servers.

2. Local File Inclusion (LFI)

Method that uses PHP script weaknesses include (), include_once (), require (), require_once () the variable was not declared properly.
With LFI menginclude an attacker can not file in the server in question.

3.SQL injection
SQL injection is a technique that utilizes SQL query writing errors in a website that a hacker could menginsert some SQL statements to the 'query'
by way of manipulating the input data to the application.

4. Cross Site Scripting (XSS)
XSS also known as the CSS is an acronym for Cross Site Scripting.
XSS is a method to enter HTML code or script into a website that is run through the browser on the client.

There's an Internet saying "There is nothing in the world's most secure Internet",
Indeed the saying is true, but here are some ways that our website is not easily penetrated by hackers, this is not 100% safe, but can reduce the risk of our website with ease in the random-random by a hacker.

1. If you are using a CMS like joomla, phpbb, PHPNuke, Wordpress and so on, rajinlah update your CMS with the latest CMS if it appears the newer version.
2. Visit sites that discuss web application security such as: www.milw0rm.com, www.packetstormsecurity.org www.securityfocus.com or to obtain information about the latest bugs.
3. Hire an expert on web security for security analyze your website.
4. Use software such as scanning Acunetix for the weaknesses that could occur in your webdite, the software can be purchased at www.acunetix.com and if you are lucky maybe you can do a search on google.com bajakannya version Sealed

0 komentar:

Post a Comment