- Keep software updated: the application, plugins and PHP version.
- Use strong, unique passwords for cPanel, FTP, database and admin accounts, and turn on two-step verification where offered.
- Keep private files private. Files such as
.envmust never be reachable from a browser. UPIPayments ships rules that return 403 for them; check by opening the address yourself. - Correct permissions: folders 755, files 644, never 777.
- Block scripts in upload folders, as UPIPayments does for
public/uploads. - Back up regularly and keep one copy off the server.
Securing a website on shared hosting
More posts
What is UPI and why every Indian business should accept it
UPI moves money between bank accounts in seconds, at any hour. Here is what it is, how a payment travels, and why it has become the default way Indian customers pay.
Getting started with the UPIPayments REST API
Keys, base URL, your first order and reading the reply. Everything a developer needs for the first hour.
Transaction charges explained: what they are and how UPIPayments charges them
Transaction charges in plain words, with worked examples of percent, fixed and capped fees.
0 comments