Discussion on: Six Ways a Russian Hacker Attacked My Website

View post

Fortunately my security was tight, so they all failed- but it is very disquieting that people actually dedicate themselves to this type of thing. Thanks for the follow by the way :)

limusina10 • Jul 19 '20

What do you recommend such as a web security steps or configurations that you recommend to keep my website safe? Is coded in php.

nastyox • Jul 19 '20 • Edited

There are a lot of things you can do. Some basic ones are:

Use mysqli_real_escape_string to sanitize anything you put in your database.
Escape any string that was provided by a user that you're going to show to another user on any page with htmlentities.
Use salted hashing to store passwords safely.
Use a modern hashing algorithm (like sha512) when you're hashing your password/sensitive data.
Don't let people upload files to your site unless you're very careful about controlling the file type and data.
There are some more good tips here.

limusina10 • Jul 19 '20 • Edited

Super helpfull!! Thanks ❤😊

Btw I didn't know that sha512 exists 😂😂