Website security

[adrianh]

I run an OsCommerce site which has been hacked twice now. Anybody got advice on securing the site?

[twinscythe12332]

do you know how they are hacking your site? I'd suggest starting at the OsCommerce site forums to see if there have been any new hacks found.

[Dave A]

I see part of their support forum is a security section.

[Cream]

Have a look at how-to-secure-your-site This might help.

What is the address of your website?

[Mark Atkinson]

Adrian - My Joomla! site has been hacked twice now too. Unfortunately if they are decent enough hackers they're going to get through just about any protection.

Have they done any serious damage to your site? Our culprits just seem to do things to annoy us - And they succeed.

[Cream]

Mark, maybe worth your read for Joomla Security:
Joomla Security Checklist

[AndyD]

When you say they hacked your site Adrian, what did they actually do? Was it malicious or passive? Was there a money making angle to it, was there theft?

[adrianh]

@cream - the url is www.scalecraft.co.za

They don't destroy the site. They disable the entire site and replace the front page. I think they do it simply to prove that they can.

I keep a backup of the entire site so when it happens I clear out the rubbish that they add and replace the damaged files.

They deleted the admin user from the database once and added their own user - I fixed this through PhPMyAdmin via Cpanel.

[byron_spy]

@cream - the url is www.scalecraft.co.za

They don't destroy the site. They disable the entire site and replace the front page. I think they do it simply to prove that they can.

I keep a backup of the entire site so when it happens I clear out the rubbish that they add and replace the damaged files.

They deleted the admin user from the database once and added their own user - I fixed this through PhPMyAdmin via Cpanel.

The best thing to do is as follow

Generate a lenght password
Get a SSL Cerificate for your website


You did not mention what osEcommerce solution your are using

If you can specify a name I would be able to assist you

[adrianh]

I run an OsCommerce site which has been hacked twice now. Anybody got advice on securing the site?

I do: "OsCommerce"