Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

The company I work for has everything based online, ie: customer data, order information, stock etc. It's possible to log in from their website and see all of this. Moving everything is not possible. So my question is this, how can I make it more secure? At the moment, it's a standard SSL login page (username + password).

Thank You.

share|improve this question

Well there are many things you can do:

  • Create IP restrictions to place(s) of work, secure those machines, if there is external access, make sure the VPN is secure.

  • Ensure the username/passwords are per person, and that actions and access are audited.

  • Standard password safety should be practiced: nothing too short, nothing dictionary, reasonably regular changes.

  • Only users that need access to data should be given it, all users should not have access to everything unless needed.

  • Timeouts on logged in users, so that they can not leave a browser authenticated for long.

  • Additional security prompts for major operations.

  • All backups should be made via secure links, if the databases are hosted remotely.

  • If hosted remotely, the hosts should have restricted access to the data preferably, unless they have good reasons for access.

  • Read data protection legislation for your region, there may be legal obligations.

share|improve this answer

Question is too vague to give a proper answer.

Secure from what?

Where is it hosted?

What scope do you have for changing things?

If you could move everything where you move it to?

It's possible to log in from their website

Eh? usually users log on to a website.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.