Securing a website on shared hosting

  • Keep software updated: the application, plugins and PHP version.
  • Use strong, unique passwords for cPanel, FTP, database and admin accounts, and turn on two-step verification where offered.
  • Keep private files private. Files such as .env must never be reachable from a browser. UPIPayments ships rules that return 403 for them; check by opening the address yourself.
  • Correct permissions: folders 755, files 644, never 777.
  • Block scripts in upload folders, as UPIPayments does for public/uploads.
  • Back up regularly and keep one copy off the server.

0 comments

Leave a comment

Not shown publicly.
Chat with us
Hi! Send us a message and we will reply here as soon as we can.