1, a reasonable allocation of authority, independent of each site are targeting the internet guests account, the account limit internet access to guests, only to allow its implementation and operation can be read by the need to site the procedure only on the website of Party A directory of sites have Read and write access, prohibit access to other directories, and to limit the risk of the implementation of its orders, so even if a hacker to upload a Trojan horse to Party A web directory, and can not be implemented, the system will not cause harm.

2, lower SQL database, SERV-U FTP software applications such as the operation of authority, MSSQL database to delete unnecessary and dangerous storage process, hackers use loopholes to prevent further invasion and to upgrade the competence and, through efficient set up to prevent unknown Overflow attacks.

3, the code of conduct site inspections to check whether the hackers were placed page Trojans and ASP Trojans, whether there is a site code in the backdoor.

4, the server operating system log analysis, check whether the system was compromised, hackers see if the Trojans and the installation of the system to do what changes.

5, the safety code of conduct site inspections to check whether there SQL injection loopholes, upload files and other common hazards loopholes site security loopholes. (PC235.COM Editor: the founding of the PRC)

6, to bear the latest server operating system patches, and installation of a reasonable allocation of common software applications (such as firewalls, antivirus software, databases, etc.) and server software updates for security, stability, good compatibility version.

7, the server operating system for rational allocation and optimization, cancelled out unnecessary system components, Tingdiao the risk of unnecessary services, disable dangerous port, by running the minimum services to achieve maximum security.

8, the common applications of information and tips on port services, to hide and forgery, use of scanning tools to prevent hackers to access server information.


Note: The above item only safeguard against windows server operating system platforms. More services involved the installation of software, copyright issues by the client to resolve. Site code only to customers involved in the security code part of the preparation and making changes, not other sites, some of the code revision and preparation.