Web Hosting Talk : Web Hosting Main Forums : Hosting Security and Technology : Any suggestions for making site secure?

[LilHouse]

Yesterday I was contacted by a friend who found her site had been hacked. Their password was a combination of letters and numbers and 14 in length. They updated the password to the maximum amount and changed all email passwords as well.

Someone told me there was a way to make a webpage more secure...besides increasing the password size, what other options are available?

Any help would be appreciated. Thanks!

[kneadingu]

Is this an *ix or windows server?

[atjeu]

its doubtfull it was a password crack... probably something else.

[VNPIXEL]

could be the guestbook issue with Cpanel.

[LilHouse]

The site is located on a Linux server with Cpanel 6.0.0-S85 and
RedHat 7.3.

Could the guestbook still be a problem if the person wasn't using it?

[rigor]

It's always good idea to keep up with the latest issues security issues and patch asap. External scans can be handy as well Strange open ports can always be a sign of hacked server.

[sprintserve]

If it has Cpanel 6, the guestbook issue had been patched. The guestbook problem doesn't need the person to use it, but as long as someone else on the same server uses it.

However her problem is more likely to be some badly written scripts if any.

Either that or the guy is pretty lucky and managed to bruteforce his way, though with a 14char password, it would take a bit of time and luck. So it's pretty unlikely.