Sphinn Home » Blogging
log security has developed into a very delicate issue over the years, as more and more security breaches have occurred, even at the big houses (Al Gore’s blog hacking is the first thing that comes to mind), proving how truly fragile they can be in the face of attacks. It’s up to you and only you, to make sure that your blog’s integrity and privacy rights aren’t comprised in any way.
5 Comments     

Comments

from smallbiztrends 174 days ago #
Votes: 0 | Vote:
+ -

Interesting article.  It happened to my site which runs on WP, on Christmas Eve.  I wrote about it and have gotten about 10,000+ sumble visits just to that article describing my experiences, plus dozens of emails from others fessing up to the same thing happening to them. 

Must be a more common occurrence than most people let on.

from bwelford 174 days ago #
Votes: 1 | Vote:
+ -

This is an excellent and complete article.  I can vouch for it since I had two blogs hacked in a similar way on Saturday January 26.  Be particularly vigilant at weekends and during statutory holidays.  In my case the hacking was done in such a way that it wasn't visible to me but was highly visible, particularly to a speedy search engine like Google.  Only by chance did I happen to check the code of a web page and happened to spot the hacked additions.  Otherwise it likely would have been quite a time before I spotted it.

from DianeV 173 days ago #
Votes: 0 | Vote:
+ -

Great article, with some real meat to it. Well done!

from IncrediBILL 173 days ago #
Votes: 0 | Vote:
+ -

It covered some interesting ground but glossed over the basics of how to stop most of the trolling botnets from injecting scripts or malware into your server in the first place.

If the files can't be uploaded to the server in the manner they currently do to infect your site, it's much safer for the moment.

You can add code to your site to stop garden variety SQL injection at the Apache level as well which will doubly protect your database.

Had you implemented patches like I'm suggesting to stop the typical botnet tools and the method of infiltration you might avoid getting hacked in the first place the next time a vulnerability is discovered, or at least postpone the inevitable a while longer until the hacker finds a way around those blocks.

from smallbiztrends 172 days ago #
Votes: 0 | Vote:
+ -

The challenge with all of this is that non-technical folks like me have to learn as we go along. And we have to help educate the people who help us, too, since they may not be thinking blogs = hacker bait and may not be up to speed on all the ways you are at risk. 

Some  of my clients' tech people are real newbies when it comes to WordPress and how to secure a WP installation.  They are smart people about a lot of things, but not necessarily WP. (They ask ME questions, as if I would know the answer, ha ha ha.)

The lesson for me in all of this is that business owners who are active online and who don't have full-time tech staff, need to realize that they will have to invest time in educating themselves to some degree.  

I'd like to just focus on content and the non-technical things I do best, but unfortunately you can't run websites if you don't know enough to be proactive and the right questions to ask your tech help, how to spot suspicious activity, etc.


Log in to comment or register here.
Search Marketing Expo

Save the date for:
SMX China (Nanjing) - Sept. 23-24
SMX Stockholm - Sept. 23-24: See who's speaking or register now.
SMX East (New York City) - Oct. 6-8: See the agenda or register today and save!
SMX London - Nov. 4-5: Pre-agenda rate now available. Click here.