Basic Server Security Guide (BSSG)

Submitted by ehcpdeveloper on Tue, 10/19/2010 - 23:48
  • Hi, this is a basic, simple security guide for your server. You should consult a full security related site/expert/article/book about security.
  • Make your passwords some long and unpredictable. For ex, 123456 is not a good pass for a production environment.
  • Try to choose your linux root pass different from mysql pass.
  • Do not disable open_basedir in your server. if you do: http://ehcp.net/?q=node/705
  • Try to check all scripts that you install against sql injection, or xss. if your php code is vulnerable, people may steal your database or delete.
  • do not give your passwords to anyone that you dont know.
  • update your server, ehcp regularly: apt-get update ; apt-get upgrade for ehcp, download it and overwrite except config.php, re-login
  • check your server for viruses or backdoors regularly,
  • watch your logs regularly,
  • that was a basic quide.
  • this is somewhat advanced, but very important:http://ehcp.net/?q=node/1106
    • Forums: 
    Ehcp HowTos