How to Secure Simple HTML Website

by 24 replies
26
Hi all,

I am about to launch a website which is pure HTML/CSS. The site has no backend and it isn't a shopping cart site. Just a simple content site in HTML.

I know anyone can easily download such HTML sites and was wondering if there is anything I can do to protect my website and content pages in it. I just don't want anyone to download my site.

So, is there anything I can do to secure my HTML website? I am not a techie guy so your 'detailed' response will be appreciated.

Have a good one.
#programming #html #secure #simple #website
  • Banned


    You can't do anything.

    If someone wants your site/page/code they don't even need a browser, just the URL/s and write a few lines of code offline in an app.

    Downloaded.
    • [ 1 ] Thanks
    • [1] reply
    • So isn't there anyway I can have any kind of security? Like:

      1. Adding a firewall (not sure how it works or if it is even relevant to my case)
      2. Adding any security on my hosting so no 'downloads' can be executed.


      Thanks,
      • [1] reply
  • Make the strongest passwords possible (a unique password for every account, at least 6 characters, mix letters, numbers, symbols, upper and lower case)
  • One option: Use a content management system based website and deliver functionality through plugins. Then there is less code exposed.

    I would worry less about someone stealing your code and focus more on making your website service deliver something valuable where people would focus on your better content
  • Hi,

    I've read the answers, and they have great points, but I'd like to share another safe and simple way I use to protect websites. Here you go:

    ..you should be the owner of your domain (otherwise, a person that owns your domain name can technically sell it).

    ..If your domain is registered with someone else's name, move it to your account using the instructions of Bluehost, iPage, etc (your domain provider);


    ..you should be the owner of your hosting subscription (same risk as with domain);


    ..make the strongest passwords possible (a unique password for every account, at least 6 characters, mix letters, numbers, symbols, upper and lower case);


    ..use password managers (1Password or LastPass);


    ..install an SSL certificate on your website (it protects your customer data if you have an online store, and helps to improve ranking in Google);


    ..set up two-factor authentication wherever it's possible;
    install latest versions of all the programs you use (including browser, operating system, and mobile devices);


    ..create a backup copy every month (check with your provider whether they do backups and if not do it yourself).
  • i think there is no way to do that !!
  • Thank you for all the replies, I really appreciate it.

    So I now understand that there is nothing I can do to prevent someone from downloading my site. But, is there anyway I can protect the pages using any web hosting feature (firewall, SSL, etc.)?

    I just don't feel like agreeing that there isn't a way to protect HTML/PHP pages. lol.

    Thanks,
  • I have read the answer and they have great points but I would like to contribute another safe and simple way to protect your website:
    • You should be the owner of your domain otherwise, a person that owns your domain name can technically sell it.
    • Use Password Manager.
    • Install an SSL Certificate on your website.
    • Set up two-factor authentication wherever its possible.
    • Install the latest version of all the program you use.
    • Create backup copy every month.

    Hopefully, i managed to explain in a Good Way.
  • [DELETED]
  • You can use this javascript code snippet to disable right clicks on the mouse. Edit it with your URL.



    <SCRIPT TYPE="text/javascript">
    <!--
    //Disable right click script
    //visit PUT YOUR url HERE/
    var message="Sorry, right-click has been disabled";
    ///////////////////////////////////
    function clickIE() {if (document.all) {(message);return false; } }
    function clickNS(e) {if
    (document.layers||(document.getElementById&&!docum ent.all)) {
    if (e.which==2||e.which==3) {(message);return false; }
    if (document.layers)
    {document.captureEvents(Event.MOUSEDOWN);document. onmousedown=clickNS;}
    else{document.onmouseup=clickNS;document.oncontext menu=clickIE;}
    document.oncontextmenu=new Function("return false")
    // -->
    </SCRIPT>
    • [1] reply
    • Scripts like that are to anyone wanting to "steal" your code what a post-it note on your TV saying "please don't steal this" is to a TV thief. It will only stop people who have absolutely zero knowledge.
  • Banned
    [DELETED]
  • If u have forms on your site I would make sure your site is not vangable to cross browser scripting and for many other reasons I would use a site like this https://validator.w3.org/ to check your markup!

    Other wise I think u are really safe using a HTML/CSS site. Especially if you are on a shared hosting plan. If u are not and using either a dedi or a home server I would make sure the server it self is secure.
  • It would be very good to check the code for possible backdoors and exploits. There are many sites that will do it for free and pretty quickly. but the guarantee is not 100%. I would also ask for help from a programmer. Just to justify your fears.
  • [DELETED]
  • For people to view your html/css they need to download it. You can obfuscate it (so it is hard to download and modify) and you can do some javascript-tricks for downloading part of it dynamically. The latter trick would make it a lot harder, but not impossible, to download.
    • [1] reply
  • just do it, very easy.
  • I do not think it is possible, no matter how much precautions you take people can take screenshots and save your content.
  • [DELETED]
  • You cannot protect core html page but there is html encryptor available you can use them
  • HTTPS or Hyper Text Transfer Protocol Secure, is a secure communications protocol that is used to transfer sensitive information between a website and a web server. Moving your website to the HTTPS protocol essentially means adding an encryption layer of TLS (Transport Layer Security) or SSL (Secure Sockets Layer) to your HTTP making your users' and your own data extra secure from hacking attempts.

  • HTML and CSS is not a programming languages so for that you dont need to secure it
    • [1] reply
  • The question is what content you trying to secure? Internet is public and not designed for confidential information

Next Topics on Trending Feed