Defence against website hacking.

[ranganv]

Hi,

I want to start a new thread to open a discussion about the steps that webmasters can take against website hackers.

One is the commercial line of products. What else ?

I am tired of all my sites carrying a "hacked by turkish hacker' file.

regards
:lockd:

[Slothie]

Most common way would be Sql injection i suppose, try to escape all your queries properly

[*Face]

If you were serious about this stuff, I would start reading sites like securityfocus.com.

Most personal sites I think get hacked by not validating user input, so I would start by validating anything that isn't a server side variable (cookies, forms etc).

[ranganv]

Thanks guys. Much appreciated ..