Sign Up to our social questions and Answers Engine to ask questions, answer people’s questions, and connect with other people.
Login to our social questions & Answers Engine to ask questions answer people’s questions & connect with other people.
Lost your password? Please enter your email address. You will receive a link and will create a new password via email.
Please briefly explain why you feel this question should be reported.
Please briefly explain why you feel this answer should be reported.
Please briefly explain why you feel this user should be reported.
I am about to launch my e-commerce site, which is built on the codeigniter framework, and I was just wondering if there are some not so obvious security things I should do before launching.
I have an SSL cert already to handle in site credit card processing, and I have changed the codeigniter config files to supress php errors etc. I also am utilizing the csrf_protection library and using the tank auth library for logins/registrations.
Is there anything else I should be doing here?
What have you done to secure the VPS itself?
Some examples:
Do you have all your software up-to-date? You should make sure there are no security updates for the entire OS.
Also, make sure you don’t use easy-to-guess passwords on any admin accounts. When in doubt, make them long and hard to guess.
If you are handling credit cards internally, you should have had to meet PCI Compliance Standards.