When you host several.
KEEPING THEM SEPARATE
Each site in its own directory Each with its own database Each with its own credentials
WHY SEPARATION MATTERS
A compromise of one site should not reach the others.
On shared hosting they share an account, so separation is limited. Do what you can.
FOR CLIENT SITES
Consider separate hosting accounts rather than several sites in one.
A compromise affecting all your clients at once is a serious event.
DOCUMENTING WHAT IS WHERE
Which domain points at which directory Which database each site uses What is installed on each
You will not remember with more than a few.
WHAT GOES WRONG
A forgotten installation in a subdirectory, never updated, eventually compromised.
That is the most common route of compromise on accounts with several sites.
WHAT TO AUDIT
Every directory in your account. Account for all of them.
Remove anything abandoned.
