-5

I want to give some small jobs to freelancers who would have FTP access to my websites hosted on my server.

I heard that sometimes it's possible they put malevolent scripts and software on the server, so that it runs from it even when the project is done.

Is there any way to avoid this and to check what processes are running, to ensure there is nothing that's running that shouldn't be there?

Thank you!

11
  • 1
    You seem to be upset that you haven't been provided an in depth, specialized technical answer to your question, but your question lacks the requisite depth, detail or context for which to provide a specialized technical answer. You haven't even stated what operating system you're dealing with. Point of fact; your question sucks.
    – joeqwerty
    Dec 6 '14 at 18:06
  • If you want better answers then ask better questions.
    – joeqwerty
    Dec 6 '14 at 18:06
  • 1
    I'm running Windows. Can you help me? - Do you see what I'm getting at here?
    – joeqwerty
    Dec 6 '14 at 18:08
  • 2
    A malicious person could leave a script on your server without causing a running process. It could be in cron, or triggered via a HTTP request. Your question is way too broad.
    – ceejayoz
    Dec 6 '14 at 18:30
  • 3
    Frankly, you're asking the wrong question. Fundamentally, do not give users you don't trust access. Have them work on a development instance or their own local development environment, and have them check their code into source control. Have you or someone you trust review and deploy their code.
    – ceejayoz
    Dec 6 '14 at 18:39
6
  1. Don't hire people you don't trust.

  2. If you have to hire untrusted people, don't give them access to a production server. Give them a temporary development environment and then when their work is done, you deploy it to the production server.

  3. If you are asking questions like "how do I check what processes are running", you probably have no business running this server. Use a shared hosting service.

7
  • Thank you for a very arrogant and obvious answer, but I was seeking for a more specialized technical advice... And I do have businesses running on this server for more than 12 years already. It's just that I'm not an expert with the server stuff, that's why I asked the question here. Dec 6 '14 at 17:55
  • 2
    I was seeking for a more specialized technical advice - You've provided no specialized information in your question. Are we to play 20 questions with you regarding the operating system, application stack, etc., etc.? Here's a question for you. See if you can provide any specialized technical advice: How do I make my car drive better?
    – joeqwerty
    Dec 6 '14 at 18:02
  • @joeqwerty funny how instead of looking into the post you try to teach me a lesson. it's written there: LINUX. very easy. Dec 6 '14 at 18:08
  • 1
    @deemeetree this is a more useful, expanded version of the real answer, which is "that's not possible." How many billions of dollars are spent on anti-virus, to do exactly what you're asking (check for and block malicious code), and how many new viruses and undetected rootkits are found every year? For that matter, last week, there was a story about a newly discovered LPT malware package that's been around since 2002. Dec 6 '14 at 18:08
  • 1
    No. I'm not kicking you. Centos 6 is an Operating System. Ubuntu 14.10 is an Operating System. Both have a Linux kernel and both behave rather differently in many cases because of the vastly different userland
    – MDMarra
    Dec 7 '14 at 12:44

Not the answer you're looking for? Browse other questions tagged or ask your own question.