Sudip Biswas

Sudip Biswas

Sudip Biswas is a computer science (CS) graduate from Pabna University of Science and Technology (PUST).

Mainly involved in web development sector, he is also enthusiastic in tech blogging. From passion to work and back to passion, writing about tech is always fun for him.

Website Security (Part 2)

Previously I wrote briefly on website security, if you haven’t read it yet, go check it out now. Today, I will talk about the solutions. If the developer is smart enough, he/she can prevent a very strong firewall between your website and the hackers. Giving the security is the job of your backend developer. Here’s how you can make your website secure from all possible attacks

 

Make a good seo team

SEO or search engine optimization is the most important thing in taking your web contents to your customers and also to public. Often the people in your SEO team might make some mistakes for quick reach and put your entire website in jeopardy. There are many ways of doing off page SEO, usually on page SEO doesn’t hurt your website that much. But unethical off page SEO can decrease the reach of your website and even can put your site to any popular search engine’s blacklist which you never want.

Do not let your users upload files

That’s right, you do not let your users upload file to your website. However, you can let them upload some specific files, such as pictures and audio clips and etc but always put a barrier. What is a barrier? A barrier is like, if they want to change their appearance in your website, for example, they want to change the profile picture, they can do it, but just let them upload file only in picture formats (jpg, png) only. You may ask why? Well if you let people to upload files regardless of extensions, that can harm your website. All the files that your users will upload, will be stored on your server so if someone tries to upload a virus, that will affect your entire website.

Stop DDoS attacks

Denial of Service attack or known as DoS attack is when someone tries to send a huge number of traffic to your website, DDoS is the same thing, but from different locations. As the technology evolves, there are firewall technologies that can detect and stop DDoS attacks. You should always upgrade your servers and firewall to avoid those attacks and your website security.

Put security check at every stop

If you give access of your website to your users, for example, if you own a blog site where people can post, your website security solutions should be the first priority. From registering to your website to logging in and posting or commenting, you should always use captcha to prevent any sort of damage to your website. As you know, now there are many tools that the hackers use to spam your website with bots. Which means, they can do harm to your website automatically with bots, not with real people. Adding a captcha will reduce them by a lot.

Keep everything up to date

A good developer knows how to keep the website away from attacks and give your organization the best security solutions. The static website days are long gone, all the new websites that are releasing now are completely dynamic unless you are living under the rocks. So, you must have some sort of CMS, plugins and everything. Always keep them up to date for all the security patches and everything that comes with it. Keep your database safe and don’t let anyone else running query on them. Update the robots.txt and always keep an eye on the ip addresses of your visitors, if you see anything unusual, block it.

The website security solutions are not that hard to find now a days. All you need to do is to focus on what you are doing. Watch your work from the view of a hacker, how can you get a sneak peak. Just put a stop to it and your website will be always safe.

By Sudip Biswas , on August 9, 2020