Restriction on entering the administration panel

Set limits on the number of password attempts. This will help you protect yourself from bootfors, which we wrote about above.

Search for weak points of the site

Use special services to check XSS vulnerabilities. For example, XSS and SQL Injection Scanner or Acunetix Web Security Scanner. As a result, you will receive a detailed report and see weaknesses that are worth working on:

Report on weak points of the site, protection of the site from hacker attacks

You can also check the site by Google Hacking Database (GHD). It finds sites with similar characteristics that are vulnerable to specific attacks. For example, sites with unclosed directory contents.

How to find out that a website has been hacked

The most unpleasant thing is that attackers usually try to hide that they hacked the site. Otherwise, the owner will start sounding the alarm, identify the malicious element and protect his site. But there are ways to detect hacking, even if it is not noticeable at first glance.

For example:

when you go to the site, a warning is displayed that it contains malicious content — similarly, if Google Ads, hosting, etc. warns about it;

the site has stopped being displayed in the search results or is rapidly losing ground;

the resource takes suspiciously long to load, consumes CPU resources too actively;

users complain about spam mailing;

there were pictures or links on the site that you didn’t add yourself, or any extraneous content;

an unknown user with admin rights appeared;

when you go to the site, you are redirected to another resource or asked to download/ update something.

If any of this is the case, do the following to dig deeper:

 

carefully analyze the site code for the presence of extraneous code fragments, iframe inserts;

look in Google Analytics at the moment when traffic began to decline sharply, on which pages the bounce rate suddenly increased, etc.;

check which sites your site links to — this can be done, for example, using Netpeak Spider: