3
votes
3answers
4k views

Isolating Apache virtualhosts from the rest of the system

I am setting up a web server that will host a number of different web sites as Apache VirtualHosts, each of these will have the possibility to run scripts (primarily PHP, possiblu others). My ...
0
votes
1answer
118 views

Securing GoDaddy Shared Hosting Account Hosting Multiple Sites

How secure is it having multiple sites on same godaddy shared hosting account? If I give client their own ftp access to their directory - theoretically they can upload any php script they want and ...
1
vote
1answer
1k views

How to secure Apache for shared hosting environment? (chrooting, avoid symlinking…)

I'm having problems dealing with Apache configuration: the problem is that I want to limit each user to his own docroot (so, a chroot() would be what I'm looking for), but: Mod_chroot works only ...
0
votes
1answer
65 views

Common ways of spam files ending up in a web directory

A friend discovered a bunch of spam files in his web directory on his web host the other day. He has no idea where they came from, and I'm not quite sure either. What are common security breaches ...
0
votes
2answers
199 views

Best practices for PHP configuration on shared server [duplicate]

Possible Duplicate: Tips for Securing a LAMP Server On a Linux based server, what are some of the best practices for securing PHP? What functions should be disabled (ex. exec, exec_shell, ...
2
votes
2answers
567 views

Distribution/setup for shared web hosting

I'm currently administrating a Gentoo server hosting a few dozen websites for friends and people with common interests. I may be moving to a new server soon, and with that comes the possibility to ...
2
votes
2answers
107 views

Run sensitive command (including passwords) on Linux without exposing data

I have an account on a shared web host which allows me to work on the server via SSH. As I have some problems installing Magento using the web installer I switched to the commandline installation. The ...
0
votes
1answer
214 views

Shared Hosting: How to Protect from abuse and ~ wildcard folder access? ex domain.com/~username

Many times google alert me that abuse content or phising is installed in my website. But looking about it there is nothing on my public folder on my server. I see that the referral url is on my ...
2
votes
5answers
2k views

Finding out who hacked my site [duplicate]

Possible Duplicate: My server's been hacked EMERGENCY All Joomla! sites hosted on a single server of mine were hacked and had the following code injected into the index.php files ...
1
vote
1answer
598 views

file permissions on shared host

I'm on a shared host, and a bit confused about file permissions: My website directory /home/user/www is owned by user:nobody Everything inside /home/user/www is owned by user:user (?) Most people ...
0
votes
2answers
164 views

Clients can access other clients web directories on shared hosting

Allowing clients ftp access or file uploads on a shared server could lead to scripts being run which can scan directories and files outside the clients web root. What can you do to stop this given ...
2
votes
2answers
149 views

Personally identifiable information (PII) on shared web hosting

Hey folks, I am providing web hosting services (shared and dedicated) and have had one of my shared hosting clients mention needing an SSL cert for their site where they are collecting insurance ...
2
votes
2answers
425 views

multiuser PHP virtualhosting environment and security

I'd like to setup a multiuser PHP virtualhosting environment. However, here comes my big concern. Users could use the PHP filesystem functions to access the other users directories, thus read the ...
3
votes
3answers
417 views

Security of shared hosting

What are some of the security risks involved with using shared hosting services such as godaddy inmotion and fatcow?
3
votes
3answers
209 views

Need a helpful/managed VPS to help transition from shared hosting

I am looking for a VPS that can help me transition out of a shared hosting environment. My main OS is Ubuntu, although I am still new to the linux world. I spend most of my day programming PHP ...