3 {{ upvoteCount | shortNum }}
3 {{ upvoteCount | shortNum }}

How to protect HTML sites agains hackers?

by lookielookies
3 replies
This may be a stupid question, but I have been searching Google and couldn't find a solution I understand.

Everywhere I look I see products and tools to protect Wordpress sites, but when it comes to protecting HTML sites, everything I find is way too technical for me.

So, the problem:

I have a site that resides inside a folder, on an addon domain. In the folder, there are only HTML files and sub-folders.
Somehow someone manages to add hacker .php files to my main and sub-folders every time again. The result is that spam emails are being sent from my domain.

I've changed my cPanel password, my FTP password, set my folder permissions to 755, but now I'm out of ideas.

I've been searching Google, but to be honest all I find are explanations I don't understand at all. They're way too technical.

How do they get in?
How can I prevent them from uploading those files?
Is there anyone out there that can explain me in simple steps, so I can finally put an end to this?
#agains #hackers #html #protect #sites #spam
  • Profile picture of the author JohnMcCabe
    Have you tried contacting your web host?

    Typically, pure html sites are difficult to hack unless the hacker gains access to your hosting at the root level. One common way to do this is to find another site on a shared server with poor security (like easy, never changed passwords) and use that as a springboard to other sites on the server. Your host should have a log of who uploaded files to your space.

    If they can't/won't help you stop these invasions, it may be time to find a new web host.
    {{ DiscussionBoard.errors[10572187].message }}
  • Profile picture of the author onSubie
    That is not because you are using HTML. That looks like a security problem for your host if someone can access your folders and add files.

    WordPress security problems occur inside the PHP code of WP files. These bugs in the code are exploited to do things they are not designed to do.

    HTML files cannot be exploited like that as they are not executable. HTML files are simple mark-up files that tell your browser how to display the page.

    If entire files are showing up in subdirectories at your host that is a problem unrelated to HTML.
    {{ DiscussionBoard.errors[10572276].message }}

Trending Topics