- Internet Discussion
- Internet Useful Resources
- Internet Quick Guide
- PHP
- JavaScript
- CSS
- HTML
- Firewall Security
- Digital Signature
- Data Encryption
- Internet Security Overview
- Social Networking
- Online Education
- Usenet Newsgroup
- Mailing List
- Collaboration Overview
- Search Engines
- Proxy Servers
- Web Servers
- Web Browsers
- Web Pages
- WWW Overview
- Website Monetization
- Search Engine Optimization
- Website Security
- Website Hosting
- Website URL Registration
- Website Publishing
- Websites Development
- Website Designing
- Websites Types
- Websites Overview
- E-mail Providers
- E-mail Security
- E-Mail Etiquettes
- E-mail Features
- E-Mail Operations
- E-Mail Working
- E-Mail Protocols
- E-Mail Overview
- Internet Protocols
- Internet Connectivity
- Internet Services
- Internet Domain Name System
- Internet reference Models
- Extranet Overview
- Intranet Overview
- Internet Overview
- Home
Selected Reading
- Who is Who
- Computer Glossary
- HR Interview Questions
- Effective Resume Writing
- Questions and Answers
- UPSC IAS Exams Notes
Website Security Consideration
Websites are always to prone to security risks. Cyber crime impacts your business by hacking your website. Your website is then used for hacking assaults that install mapcious software or malware on your visitor’s computer.
Hackers may also steal important customer data such as credit card information, destroy your business and propagate illegal content to your users.
Security Considerations
Updated Software
It is mandatory to keep you software updated. It plays vital role in keeping your website secure.
SQL Injection
It is an attempt by the hackers to manipulate your database. It is easy to insert rogue code into your query that can be used to manipulate your database such as change tables, get information or delete data.
Cross Site Scripting (XSS)
It allows the attackers to inject cpent side script into web pages. Therefore, while creating a form It is good to endure that you check the data being submitted and encode or strip out any HTML.
Error Messages
You need to be careful about how much information to be given in the error messages. For example, if the user fails to log in the error message should not let the user know which field is incorrect: username or password.
Vapdation of Data
The vapdation should be performed on both server side and cpent side.
Passwords
It is good to enforce password requirements such as of minimum of eight characters, including upper case, lower case and special character. It will help to protect user’s information in long run.
Upload files
The file uploaded by the user may contain a script that when executed on the server opens up your website.
SSL
It is good practice to use SSL protocol while passing personal information between website and web server or database.
Advertisements