|
sfcordice
Starting Member
United Kingdom
3 Posts |
 Posted - June 23 2002 : 09:29:11
|
Dear VP-ASP Peers,
While most people out there are honest decent citizens, not wanting to harm others, many are hell-bent on destroying the blood and sweat that many of us put into making our E-Businesses successful. Sad! But it's true.
To the good people out there, to tighten your VP-ASP security, I recommend the following tips. The list is not exhaustive. But it's a start.
1. Rename your database from "shopping400.mdb" to something else.
2. DON'T keep your database in any of your web directories. Most ISPs, including Valshare, will provide you a directory outside the scope of your web server to put sensitive files. If you don't have this capability you should seriously think about changing your ISP. Valshare offers extremely competitive web hosting plans with this capability.
3. Rename your shopadmin.asp to something else. Remember also to modify the "xadminpage" entry from VP-ASP administrator menu to reflect the new name.
4. Once your shop is live, there is very little advantage keeping shopdbtest.asp and shopa_sessionlist.asp on your site. They contain hackers-food. Remove them! Their removal will not break your shop operation. But will certainly help starve potential hackers of your e-Shop.
5. I recommend that you set the "xshopclosed" to "yes" until your have renamed or removed any file(s) that exposes your shop to hackers' abuse. Once your finished making the changes, set it back to "no".
6. BACKUP your shop db, especially if your are using the MS Access version, EVERY DAY! Yes! Make backing up your shop db your religion. DO IT EVERY DAY! Download it to your local machine. DON'T depend on the fact that your ISP might be backing up your site's data. As a backup policy, it is not a bad thing to keep seven copies of your shop database. One copy for each of the last seven days of the week. Ask yourself, which is more expensive? The time it takes to backup your shop database every day, or having to re-enter all your valuable data - most of which you would have lost anyway.
----------------
If you are seeking support on making your website and/or webstore more effective, or perhaps even seeking web design, or competitive, reliable and secure web hosting services, Valshare may have the answer. Vist our website now!
Kind regards,
StClair Cordice
Valshare Ltd
e-mail: [email protected]
URL: http://www.valshare.com |
|
All Forums
SECURITY! Take it Seriously!
New Topic
Printer Friendly
Topic 
TrustGuard - PCI Security Scanner
