Security·4,761 discussions

[birdmantd]

Website Security

Locked

Tags: Security, Web development

Hey there,
I have a Php Built Tool Based website, it hosts Fee Calculator tools for online payment processors, whenever i try to preview my website as a user it shows a message that This website is not secure, i have already installed SSL Certificate on my website.
Any sugguestions?

Internet link deleted as SPAM by moderator.

• This topic was modified 1 year, 5 months ago by birdmantd.

Topic

Re: security

In reply to Website Security

What exactly is “it” in “it shows”. I assume it’s Chrome.

Do you use a https:-URL? Do you redirect a http:-URL? See https://www.hostpapa.com/blog/web-hosting/fix-https-not-secure-message-in-chrome/ for example.

Website security

In reply to Website Security

Securing a website is an essential aspect of website development and maintenance. Here are some steps you can take to secure your website:

Use HTTPS: HTTPS encrypts data sent between the website and users’ browsers. It helps to prevent man-in-the-middle attacks and data interception. You can obtain an SSL/TLS certificate from a trusted certificate authority to enable HTTPS on your website.

Keep software up to date: Keep your website’s software, including the content management system (CMS), plugins, and themes, up to date with the latest security patches and updates. Attackers often exploit vulnerabilities in outdated software to gain access to websites.

Use strong passwords: Use strong, unique passwords for all user accounts on your website, including admin accounts, and encourage users to do the same. Avoid using default passwords or easy-to-guess passwords.

Implement two-factor authentication (2FA): Implement 2FA for all user accounts, especially for admin accounts. This adds an extra layer of security, making it more difficult for attackers to gain access to user accounts.

Use a web application firewall (WAF): A WAF can help protect your website from common attacks like SQL injection, cross-site scripting (XSS), and cross-site request forgery (CSRF). Many hosting providers offer WAF as part of their services.

Regularly backup your website: Regularly backup your website and store the backups in a secure location. This can help you quickly restore your website in case of a security breach or data loss.

Educate users: Educate website users on security best practices, such as using strong passwords, avoiding phishing emails, and being cautious about clicking on links or downloading attachments from unknown sources.

By following these steps, you can significantly improve the security of your website and reduce the risk of a security breach.

Reply To: Website Security

In reply to Website Security

Hello! It sounds like your website might have some mixed content warnings. This happens when your website is served over HTTPS (with an SSL certificate) but there are still elements being loaded over HTTP (non-secure connection). You can try the following steps to fix this issue:

Check your website for any references to HTTP (rather than HTTPS) in your HTML code. You can use the “Inspect” tool on your web browser to look for these.

Update any references to HTTP to use HTTPS instead. This includes links to images, stylesheets, and other resources.

Ensure that any third-party widgets or tools you’re using (like payment processors) also support HTTPS.

If you’re still having trouble, you can use a tool like the “Why No Padlock?” website to help identify any remaining mixed content issues.

Once you’ve resolved any mixed content warnings, your website should show up as secure for your users.

[danielwill0309]

Reply To: Website Security

In reply to Website Security

Securing your website is critical for protecting your own and your users’ data from multiple online dangers. Here’s a detailed tutorial that will help you safeguard your website.

Use HTTPS: – Encrypt data sent between your users and your server using HTTPS. Obtain an SSL/TLS certificate from a trusted Certificate Authority (CA) and configure your web server to use HTTPS.

Keep Software Updated: – Update the plugins, content management system (CMS), web server software, and any other software you use regularly. Security patches are frequently included in updates to address flaws.

Strong Passwords: – Enforce strict password regulations for administrator and user accounts. Promote the usage of multi-factor authentication (MFA) and encourage the creation of complicated passwords.

Web Application Firewall: – Install a WAF to keep an eye on and filter HTTP traffic going between the Internet and a web application.

Security Plugins: – To improve security when using a content management system (CMS) like WordPress, install security plugins. These plugins can be offered features like virus scanning, firewall protection, and restriction.

Regular Backups: – Make regular backups of the databases and files on your website. Backups should be safely kept off-site, ideally in several places.

File Upload Security:- Make sure you impose size restrictions and validate file types if your website permits file uploads in order to stop malicious file uploads.

Secure Hosting: – Select a trustworthy web host that places a high priority on security.

Access Control: – Limit who can access private sections of your website, like server configuration files and administrative interfaces.

Security Headers: – To improve security, add security headers to the configuration of your web server.

Monitoring and Logging: – Configure your website to be monitored and to log in order to find and look into security occurrences.

Educate Users: – Inform your users about common security risks, such as reused passwords and phishing attempts.

By following these best practices, you can significantly improve the security of your website and reduce the risk of data breaches and other security incidents.

• This reply was modified 8 months ago by danielwill0309.
• This reply was modified 8 months ago by kees_b.

[Author]

Replies