Knowledgebase

.htaccess Against MySQL Injections and Other Hacks MySQL injection attempts are one of the most common hacking attacks against PHP websites. If... "Connection Timed Out" When Sending or Receiving The client could not reach the server at all.WHAT IT MEANSNo response on the port it tried. This... "Not Secure" in the Address Bar The browser is telling visitors the page is not encrypted.TWO DIFFERENT SITUATIONSThe page loaded... 403 Forbidden The server refused to serve the request.WHAT IT MEANSAccess denied. Either permissions, a rule,... 503 Service Unavailable The server cannot handle the request at present.WHAT IT MEANSTemporary unavailability. Different... A Correct Cloudflare Configuration for a Business Website What good looks like.DNSRoot domain and www: proxiedMail hostname and MX: DNS onlycPanel, FTP and... A Maintenance Plan Description You Can Adapt Wording for what you sell.WHAT IS INCLUDEDCore, theme and plugin updates, applied monthly after a... A Maintenance Routine for a VPS What to do, and how often.WEEKLYApply security updates Check disk space Check backups ran and... A Monthly Backup Review Fifteen minutes.WHAT TO CHECKRecent backups present in storage, with correct dates and plausible... A Monthly Reseller Routine What to do regularly.WEEKLYCheck for update notices and announcements Apply maintenance to sites... A Realistic Assessment of Self-Hosting When to install software and when not to.WHAT SELF-HOSTING GIVES YOUControl over your data No... A Security Routine What to do regularly.WEEKLYApply security updates Check for unexpected user accounts Check... A Security Routine for a Small Business Ongoing practice.MONTHLYConfirm updates are applying across devices Check backups ran Review... A Store Health Check to Run Quarterly Ninety minutes, four times a year.TECHNICALWooCommerce > Status, and clear every warning PHP... Access, Licences and Credentials What you should hold.WHAT YOU SHOULD HAVEDomain registrar access Hosting account access Site... Adding a Service to an Existing Account Buying more.HOWLog in to the Client Area first, then order.That adds the new service to your... Adding Records for Third-Party Services Verification and integration.WHAT ASKS FOR THEMSearch Console Business profile verification Email... Administering Microsoft Services Where configuration happens.WHAT ADMINISTRATION CENTRES EXISTA central portal for users, licences... Administrative Roles and Privileged Access Who can do what.WHAT ROLES PROVIDEDefined sets of administrative permissions.WHAT TO... Affiliate Account Security Your affiliate account is part of your Client Area account and deserves the same protection.THE... After Installing: The First Ten Minutes What to do before building anything.SECURITYChange any default administrator credentials Delete... Agent Banking and Cash Networks Reaching customers without branches.WHAT AN AGENT ISA local business providing cash-in, cash-out... AI and Code Generation Programming assistance.WHAT IT DOES WELLWriting boilerplate and repetitive code Explaining... AI and Code Security Specific risks.WHY SECURITY CODE IS DIFFERENTSecurity failures are silent. Code that works and is... AI for a Security Services Business Guarding and monitoring.WHERE IT HELPSIncident report drafting from your notes Proposals and... AI for a Web Developer Building and maintaining sites.WHERE IT HELPSExplaining unfamiliar code Boilerplate Tests... AI in Cybersecurity Machine learning applied to defence and attack.WHAT IT IS USED FOR DEFENSIVELYDetecting anomalous... AI in Cybersecurity Defence Protecting systems.WHERE IT HELPSDetecting anomalous behaviour in logs and traffic Prioritising... AI in Professional Industries: Part Three Summary The remaining sectors.JOURNALISMJournalism is the verification. Never publish a generated fact,... AI in Software Development Where it helps developers.WHERE IT GENUINELY HELPSBoilerplate and repetitive code Explaining... Android Data Storage Where information lives on device.WHAT OPTIONS EXISTKey-value preference storage, for small... Anomaly Detection Finding the unusual.WHAT IT ISIdentifying observations differing significantly from normal.WHERE... Anomaly Detection Explained Finding what does not fit.WHAT IT DOESIdentifies items unlike the rest: unusual transactions,... Answering Security Questions From Customers When clients ask.WHEN THIS ARISESA larger customer assessing you as a supplier A contract... Apple Security: Everything That Matters, Briefly The summary.THE MODEL IS DEFENCE IN DEPTH, EACH LAYER ASSUMING THE ONE ABOVE MAY FAILHardware... Apple Technology: Everything That Matters, Briefly The whole category in one page.DEVELOPMENT REQUIRES macOS HARDWARE, WITHOUT EXCEPTIONWhich is a... Apple's Security Architecture How the platform protects itself.WHAT THE LAYERS AREHardware: a dedicated secure element storing... Application Security Checklist What to verify before a site goes live.INPUT AND OUTPUTAll database queries parameterised Output... Applications and Industries: Everything That Matters, Briefly The summary.NEVER CONNECT TO SAFETY OR CONTROL SYSTEMS IN A WAY THAT CAN AFFECT THEMRead-only... Applying System Updates The single most important ongoing maintenance task.WHYMost server compromises exploit known... Are you sure you want to do this? A WordPress security check failed.WHAT IT MEANSA nonce, the token WordPress uses to verify that a... Arranging Ongoing Maintenance After the project ends.WHAT MAINTENANCE INVOLVESApplying updates Monitoring the site Backups... Assessing an Exchange Choosing where to trade.WHAT TO EXAMINERegulatory registration, in a jurisdiction that matters... Assessing Legacy PHP Code Judging what you have.WHAT TO LOOK FORThe PHP version required Whether queries are parameterised... Authentication and Sessions Establishing who someone is.WHAT AUTHENTICATION ISEstablishing identity.WHAT AUTHORISATION... Authentication Mechanisms Compared Ways of proving identity.WHAT THE FACTOR CATEGORIES ARESomething known Something held Something... Authentication Methods How people prove who they are.WHAT METHODS EXISTPasswords Authenticator applications, producing... Authentication Options How people sign in.WHAT THE BASELINE ISEmail and password, with a reset flow that is secure.WHAT... Authoritative DNS Server Design Serving a zone reliably.WHAT RELIABILITY REQUIRESSeveral servers On separate networks In separate... Automating With Platform Pipelines Continuous integration on hosted platforms.WHAT PIPELINES DORun defined steps automatically when... Avoiding Plugin Overlap Two plugins doing one job.WHERE IT HAPPENSCaching: two caching plugins conflict badlySEO: two SEO... Azure Compute Options Where code runs.WHAT VIRTUAL MACHINES PROVIDEA complete operating system you control.What they... Azure Identity and Access for Resources Controlling who can do what.WHAT ROLE-BASED ACCESS CONTROL PROVIDESPermissions assigned at a... Azure Networking Connecting resources.WHAT A VIRTUAL NETWORK ISAn isolated network in which your resources... Azure Security Practices Protecting cloud resources.WHAT TO CONFIGURE FIRSTMulti-factor authentication for every... Azure Storage Holding data.WHAT STORAGE TYPES EXISTObject storage, for unstructured data and files File shares,... Backend Security: Everything That Matters, Briefly The summary.AUTHENTICATION WITHOUT AUTHORISATION IS THE COMMONEST SERIOUS FAULTA role says what... Backups as a Security Control A tested backup turns a compromise from a crisis into an inconvenience. It is the most valuable... Backups as Security The measure that saves you.WHY BACKUPS ARE SECURITYThey are what lets you recover from anything:... Backups for Businesses with Legal Obligations Where records retention is required.WHAT MAY APPLYTax record retention Contractual obligations... Balancing Security and Customer Experience Not treating everyone as a suspect.THE TENSIONControls reduce fraud and add friction.WHAT TO... Bare-Metal Servers Physical machines without virtualisation.WHAT THEY PROVIDEAll of the hardware, with no hypervisor... BGP Security and Route Hijacking Protecting routing.WHAT THE FUNDAMENTAL WEAKNESS ISThe protocol was designed for a trusted... Biometric and Local Authentication Face and fingerprint recognition.WHAT IT ACTUALLY CONFIRMSThat the device's enrolled owner is... Biometric Technology Authenticating by physical characteristics.WHAT IS USEDFingerprints Face geometry Iris patterns... Blocking Brute-Force Attacks on wp-login.php Automated bots hammer /wp-login.php and /xmlrpc.php on every WordPress site on the internet. Even... Blocking IP Addresses and Ranges cPanel's IP Blocker refuses connections from specified addresses.BLOCKING AN ADDRESScPanel >... Blocking Unwanted IP Addresses with IP Blocker IP Blocker stops specific addresses or ranges from reaching your sites at all.BLOCKING AN... Bot Traffic and How It Slows Your Site Traffic that is not customers.WHAT IT ISAutomated requests: search engine crawlers, scrapers,... Brute-Force Attacks and How to Stop Them Brute forcing means trying password after password against a login page. Bots do this against... Budgeting for Security Spending sensibly.WHAT COSTS LITTLE OR NOTHINGUpdates Unique passwords and a second step Access... Building a Proportionate Security Posture Not overdoing it.THE PRINCIPLEEffort proportionate to what is at stake.WHAT EVERY BUSINESS... Building a Simple Security Routine Security is maintenance, not a project you finish. A short routine beats an occasional large... Building a Testing Career Developing in the field.WHAT ENTRY ROUTES EXISTManual testing roles Support roles, moving across... Building and Consuming Webhooks Receiving notifications from other systems.WHAT A WEBHOOK ISAn external service calls a URL on... Building and Facility Monitoring Connected premises.WHAT IS MONITOREDTemperature and humidity Occupancy Door and window state... Building APIs With Express The established framework.WHAT IT PROVIDESRouting Middleware Request and response helpersWHAT IT... Building Development Tools Tools for your own team.WHY THEY MATTERThe speed of content creation determines how much content... Building Gateway Software The bridge between devices and the network.WHAT A GATEWAY DOESConnects to local devices... Building Structure and Layout How facilities are arranged.WHAT THE MAIN AREAS AREThe data halls, containing racks Power rooms,... Building Tools and Services for the Sector Legitimate commercial opportunities.WHAT THE GENUINE DEMAND IS FORWallet and key management... Building Trust as a Small Provider Overcoming the size objection.WHAT BUYERS WORRY ABOUTThat you will disappear That their data is... Buying Security Services Sensibly What to buy and what you already have.WHAT IS INCLUDED WITH HOSTINGFree SSL through AutoSSL... CAA Records Controlling which authorities may issue certificates.WHAT THEY DOSpecify which certificate... Cannot Log In to the Administrator Area Locked out of your own application.FIRST CHECKSIs the password correct? Reset it rather than... Card Numbers and Data What a card carries.WHAT THE NUMBER CONTAINSAn identifier for the issuing institution at the... Cards and Networks: Everything That Matters, Briefly The summary.NEVER STORE THE SECURITY CODE AFTER AUTHORISATIONScheme rules prohibit it absolutely.... Careers and Skills in Data Centre Operations Working in the field.WHAT ROLES EXISTFacility technicians, handling power and cooling plant Data... CDN and SEO Considerations Effects on search visibility.WHAT HELPSFaster pages, which is a modest ranking factor and a real... Certificate and Security Terms Encryption and trust.SSL AND TLSProtocols encrypting traffic between a visitor and a server.TLS... Certificate Errors in One Browser Only When the problem follows a specific browser.WHAT IT USUALLY MEANSThe certificate is fine and... Certificate Security and Transparency Preventing misissuance.WHAT MISISSUANCE ISA certificate issued for a name to someone not entitled... Certifications and Learning Paths in IT Formal qualifications.WHAT CERTIFICATIONS DEMONSTRATEA defined body of knowledge, assessed... Changing Credentials After a Compromise What to change.WHAT TO CHANGEHosting account password Site administrator passwords, all of them... Changing Developers Moving to someone new.WHEN TO CONSIDER ITPoor communication Work not delivered You cannot get... Changing Your Account Details Keeping your information current.WHEREClient Area > Account Details, or the equivalent... Changing Your cPanel Password Your cPanel password protects every file, database and mailbox on your account. Change it... Changing Your PHP Version for WordPress Newer PHP versions are faster and more secure. Older ones are eventually retired and stop... Changing Your PHP Version with MultiPHP Manager Different sites on one account can run different PHP versions.CHANGING THE VERSIONIn cPanel open... Checking Whether You Have Been Compromised Verification.WHAT TO CHECKYour user list, for accounts you do not recognise Files modified... Checklist: Annual Security Review Once a year, properly.DATAWhat do you hold, where, and why? Delete what you no longer need... Checklist: Before Going Live Pre-launch review.VERSION CONTROLEverything committed No secrets in history Ignore file... Checklist: Monthly Infrastructure Review A short routine.UPDATESOperating system and package updates applied Dependency vulnerabilities... Checklist: Monthly Network Check A short routine.EQUIPMENTFirmware current on router and access points Nothing overheating Nothing... Checklist: Monthly Security Review Fifteen minutes.DEVICESAre updates applying on every device? Is anything running an unsupported... Checklist: Offboarding Someone Security steps when a person leaves.THE SAME DAYDisable every account, working from the list made... Checklist: Onboarding Someone New Security steps when a person joins.BEFORE THEY STARTDecide what access the role requires Prepare... Checklist: Reviewing Python Code What to look for.CORRECTNESSDoes it do what it claims?Are edge cases handled: empty, missing,... Checklist: Setting Up a New Device Before it holds anything.BEFORE USEApply all available updates Set a screen lock with a short... Checklist: Setting Up a New Office Network From nothing to working.BEFORE INSTALLATIONConnectivity ordered, with lead time allowed Cabling... Checklist: Taking a Laravel Application Live Before launch.CONFIGURATIONEnvironment set to production Debug mode off Application key set... Checkout Security and Trust Why customers hesitate.WHAT REASSURES CUSTOMERSHTTPS across the whole site, visibly Real contact... Choosing a Data Centre Site Where facilities are built.WHAT MATTERS IN SITE SELECTIONPower availability and reliability... Choosing a Technical Specialisation Deciding where to go deep.WHAT TO ASSESSWhether the work genuinely interests you Whether demand... Choosing a WordPress Theme What matters in the decision.WHAT ACTUALLY MATTERSSpeed Whether it is maintained Whether it works... Choosing an IoT Platform Where device data arrives.WHAT A PLATFORM PROVIDESDevice registry and identity Secure message... Choosing and Storing Strong Passwords Most account compromises begin with a guessed, reused or stolen password rather than a clever... Choosing and Using Security Software Protection on devices.WHAT IT DOESDetects and blocks known malicious software Warns about... Choosing Between a Plugin and a Separate Application When to extend and when to install.USE A PLUGIN WHENThe requirement is secondary to your main... Choosing Between an Addon Domain and a Separate Account Where to host a second site.ADDON DOMAINSame account, shared resources, one login, one... Choosing the Right PHP Version PHP runs most websites on our servers, and the version matters for both speed and... Choosing the Right Setup for Your Business Type Matching the tools to what you actually do.IF YOU SELL PHYSICAL PRODUCTSA shop platform, payment... Choosing Tools Sensibly Avoiding unnecessary complexity.WHAT TO ASK BEFORE ADOPTING ANYTHINGWhat problem does this solve?... Choosing Where to Run Your Application Hosting decisions.WHAT THE OPTIONS AREShared hosting A virtual private server A dedicated server... Classifying and Prioritising Defects Deciding what gets fixed.WHAT SEVERITY MEASURESTechnical impact of the defect.WHAT PRIORITY... Cleaning a Hacked Website Step by Step Work in this order. Cleaning while the site is still being re-infected wastes the effort.1.... Cleaning Up Your Hosting Account Recovering space and reducing clutter.WHAT TO REMOVEBackup archives you have downloaded Old site... Closing a Project Properly The end of the work.WHAT TO DOConfirm the work is complete Deliver everything Provide... Cloud Services and Your Data Data held by others.WHAT THE PROVIDER SECURESTheir infrastructure.WHAT REMAINS YOURSYour account... Cloudflare and AutoSSL Making certificates issue correctly.THE PROBLEMAutoSSL validates a domain by placing a file on... Cloudflare and Visitor IP Addresses Why your logs show the wrong address.THE PROBLEMWhen traffic is proxied, our server sees... Cloudflare and Your Origin IP When Cloudflare proxies your site, the address visitors see is not yours.HOW IT WORKSYour... Cloudflare Pages and Static Hosting Hosting a site at Cloudflare itself.WHAT IT ISHosting for static sites, built from a repository... Cloudflare Security Levels The global protection setting.WHAT IT DOESDetermines how aggressively Cloudflare challenges... Cloudflare Settings That Commonly Cause Problems The short list.FLEXIBLE SSLCauses redirect loops and is insecure. Use Full (strict).The single... Cloudflare Settings to Review Annually A yearly check.DNSEvery record still needed, and nothing missing Proxy states correct,... Cloudflare Terminology Explained The words in the dashboard.ZONE: a domain added to Cloudflare, with its own records and... Cloudflare Universal SSL and What It Covers The certificate Cloudflare presents to visitors.WHAT IT ISA certificate Cloudflare issues... Code Review Checking each other's work.WHY REVIEWCatching problems before they reach production Spreading... Coding Safety Rules What to always do.BACK UP FIRSTBefore running anything generated against real data or a live... Collecting Data Responsibly Ethics in research.WHAT APPLIES WHEN RESEARCH INVOLVES PEOPLEInformed consent The right to... Common Misconceptions About Data Centres What people get wrong."THE CLOUD IS NOT PHYSICAL"It is buildings full of equipment, with power... Common Mistakes Across Google Platforms What repeatedly goes wrong.NO BUDGET ALERTSDiscovering consumption through the bill.UNRESTRICTED... Common PHP Security Failures What actually goes wrong.OUTDATED PHP OR DEPENDENCIESKnown vulnerabilities, publicly documented... Common Protocols You Will Encounter What each is for.HTTP AND HTTPSWeb traffic. HTTPS is the encrypted form, and what everything... Common Security Mistakes What goes wrong.NOT UPDATINGThe largest cause of compromise.REUSED PASSWORDSA breach elsewhere... Common SSL Myths Advice that was true once, or never."SSL REQUIRES A DEDICATED IP"Obsolete. SNI made this untrue... Common Technical SEO Problems What goes wrong.THE SITE IS NOT INDEXEDThe visibility setting, or robots.txt.PAGES ARE... Common Types of Malware on Shared Hosting Knowing what you are looking at helps you judge the severity.SEO SPAMHidden links or entire pages... Common VPS Mistakes The ones that cause real damage.NOT SECURING IT BEFORE GOING LIVEAutomated attacks find new... Comparing Content Management Systems An honest comparison.WORDPRESSLargest ecosystem, most plugins, most developers, easiest to find... Compliance and Certifications What larger customers demand.WHAT COMES UP IN SALESSecurity questionnaires Requests for... Compliance and Risk: Everything That Matters, Briefly The summary.COMPLIANCE IS DEMONSTRATED BY EVIDENCE, NOT INTENTRecord every screening match and... Composer and Dependency Management Using libraries.WHAT COMPOSER ISThe standard tool for managing PHP dependencies.WHAT IT... Computer Fundamentals: Everything That Matters, Briefly The whole category in one page.IDENTIFY THE LAYER BEFORE DIAGNOSINGHardware, firmware, operating... Computer Software: Everything That Matters, Briefly The summary.A STOPPED SERVICE PRODUCES SYMPTOMS WITH NO VISIBLE CAUSEMany functions depend on... Computer Vision Explained Making computers interpret images.WHAT IT DOESClassification: what is in this imageDetection:... Conditional Access Policies Controlling when access is permitted.WHAT THEY DOEvaluate conditions at sign-in and decide... Configuring PHP for WooCommerce Default PHP limits are set for ordinary websites, not shops.RECOMMENDED VALUEScPanel >... Connecting Sites and Remote Workers Multiple locations.WHAT THE REQUIREMENT ISReaching resources at one location from another,... Connection reset by peer The connection was closed unexpectedly.WHAT IT MEANSThe other end terminated the connection... Connection timed out when sending or receiving mail The mail client could not reach the server.WHAT IT MEANSNo response on the port it tried. A... Consensus and Networks: Everything That Matters, Briefly The summary.SECURITY RESTS ON ATTACK COSTING MORE THAN THE GAINWhich is why small networks are... Console Access and Remote Control Reaching equipment directly.WHAT CONSOLE ACCESS PROVIDESThe equipment's own display and keyboard,... Constraints That Shape IoT Design What limits the possible.WHAT POWER CONSTRAINSHow often a device can measure and transmit Which... Consumer Connected Devices Products for homes and individuals.WHAT THE CATEGORIES AREHome security and cameras Lighting and... Containers and Whether You Need Them Docker and similar, on a VPS.WHAT THEY DOPackage an application with its dependencies so it runs... Continuous Deployment from a Repository Deploying automatically when code is pushed.HOW IT WORKSYour repository host runs a pipeline on... Continuous Integration for Apple Projects Automating builds.WHAT IT REQUIRESA build machine running macOS.WHAT OPTIONS EXISTApple's own... Control Panels for a VPS Whether to install one, and which.WITH A CONTROL PANELcPanel and WHM, or an alternative, gives... Controlling Costs Keeping the business efficient.WHAT THE MAIN COSTS AREPeople Infrastructure Software and tooling... Creating a Client Area Account You need an account before you can order anything, and it is created as part of your first order... Creating an Account During Checkout You can create your Client Area account as part of your first order.WHAT YOU WILL BE ASKED... Creating Client Accounts The routine task.THE PROCESSWHM > Create a New Account.Enter the domain, a username, a strong... CRM and Business Applications Customer records and business management.THE OPTIONSSelf-hosted CRM applications, which you... Cron Jobs and Security Scheduled work as a risk.WHAT TO BE CAREFUL WITHScripts with credentials in them Jobs running... Cross-Training and Shared Knowledge Reducing dependence on individuals.THE PROBLEMOne person who knows something nobody else... Custody and Institutional Infrastructure Holding assets at scale.WHAT INSTITUTIONS REQUIRESegregation of assets Insurance Audited controls... Custody Options Who holds the keys.WHAT SELF-CUSTODY MEANSYou hold the keys, and bear full responsibility.WHAT IT... Customer Accounts and Data Managing customer information.WHAT THE SHOP STORESNames, addresses, phone numbers, email... Customer Support for SaaS Helping people use the product.WHY IT AFFECTS REVENUE DIRECTLYSupport quality influences renewal,... Cyber Security Myths Worth Discarding Common misconceptions."WE ARE TOO SMALL TO BE TARGETED"Attacks are automated and... Cyber Security: Everything That Matters, Briefly The whole category in one page.WHAT ACTUALLY CAUSES INCIDENTSSomething out of date, a reused... Cybersecurity Automation Defending at machine speed.WHY IT IS NECESSARYAttacks are automated, and manual response cannot... Data Centre Networking: Everything That Matters, Briefly The summary.MODERN DESIGNS OPTIMISE FOR TRAFFIC BETWEEN MACHINES, NOT IN AND OUTMeasure actual... Data Centre Security Controls Protecting the facility and its systems.WHAT PHYSICAL CONTROLS COVERPerimeter, building, zone,... Data Centre Technology: Everything That Matters, Briefly The whole category in one page.WHAT YOU ARE ACTUALLY BUYING WITH HOSTINGThe facility as much as... Data Protection and the NDPR Obligations when you hold customer information.WHAT YOU PROBABLY HOLDNames, phone numbers, email... Data Protection as a Compliance Obligation Holding personal information.WHAT COUNTS AS PERSONAL DATAInformation identifying a living... Data Protection Obligations Handling customer information.WHAT YOU HOLDCustomer names, contact details, addresses, order... Data Security: Everything That Matters, Briefly The summary.START BY KNOWING WHAT YOU HOLDYou cannot protect data you have not identified. Most... Database Naming and Organisation Conventions that help later.NAMING DATABASESDescriptive of the site or application: shop, blog,... Dealing with Bad Bots and Scrapers Not all automated traffic is malicious, but a great deal of it is worthless to you and expensive... Deciding Between Hosting Email and a Dedicated Provider Both are legitimate. The right answer depends on how you work.HOSTING EMAIL SUITS YOU IFYou need... Deciding When to Release The go or no-go judgement.WHAT THE DECISION REQUIRESWhat has been tested, and what has not Known... Deciding When to Take on Debt Deliberate compromise.WHEN IT IS DEFENSIBLEA genuine deadline where being late costs more... Decommissioning Equipment Removing things properly.WHAT TO ESTABLISH FIRSTWhat the equipment does What depends on it... Dedicated IPs and Attack Exposure A dedicated address is directly attributable to you, which cuts both ways.WHAT CHANGESOn a shared... Dedicated IPs and Compliance Requirements Some contracts and regulatory frameworks reference network configuration.WHERE IT ARISESA partner... Dedicated IPs and SSL: The Obsolete Advice The most common reason people ask for a dedicated IP, and it has not been true for a decade.THE... Defects and Process: Everything That Matters, Briefly The summary.SEVERITY IS TECHNICAL IMPACT; PRIORITY IS URGENCYThey differ, and conflating them... Deploying and Managing Applications Getting software onto devices.WHAT DEPLOYMENT OPTIONS EXISTStore applications Line-of-business... Deployment and Publishing: Everything That Matters, Briefly The summary.LOSING YOUR ANDROID SIGNING KEY MEANS YOU CANNOT UPDATE THE APPLICATION AT ALLUse the... Designing Checkout and Payment Where money changes hands.WHY IT MATTERS MOSTEvery problem here costs a sale directly.WHAT TO... Designing for Trust Appearing legitimate.WHY IT MATTERSVisitors here are cautious, and with reason.A site that looks... Designing Tests: Everything That Matters, Briefly The summary.MOST DEFECTS OCCUR AT BOUNDARIESTest the boundary, one below and one above. Always... Developer Programme and Distribution: Everything That Matters, Briefly The summary.LAPSED MEMBERSHIP REMOVES YOUR APPLICATIONS FROM THE STOREEstablish that the annual... Developing From Support Into Other Roles Career progression in IT.WHY SUPPORT IS A GOOD STARTIt exposes you to every system, every failure... Device Identity and Provisioning Getting devices into service.WHAT IDENTITY REQUIRESA unique identifier per device Credentials... Device Security: Everything That Matters, Briefly The summary.THE FOUNDATIONUpdates, applied automatically. Every day between a fix being available... Diagnosing a Drop in Search Traffic Working out what happened.FIRST, CONFIRM ITCompare like with like: the same period length,... Diagnosing Webhook Problems When orders do not update.CHECK THE URLCompare what your plugin specifies against what is in the... Diagnosing Whether Cloudflare Is the Problem Establishing where a fault lies.THE QUICKEST TESTPause Cloudflare from the dashboard. Traffic... Digital and Data Risks Technology exposure.WHAT CAN HAPPENA compromised website Loss of customer data Ransom demands... Disabling XML-RPC on WordPress xmlrpc.php allows remote applications to talk to WordPress. It is also routinely abused for... Disposing of Devices Safely End of life.WHY IT MATTERSDeleted files remain recoverable.A sold or discarded device can leak... Disposing of Equipment Safely End of life.WHAT TO DO BEFORE DISPOSING OF ANYTHINGBack up what you need Sign out of every... Disputes About Work or Payment Resolving disagreements.WHAT MOST DISPUTES ARE ABOUTScope: what was includedQuality Timescale... DNS and Certificate Issuance How AutoSSL depends on DNS.THE CONNECTIONAutoSSL validates that you control a domain, usually by... DNS Best Practices Habits worth adopting.RECORD WHERE EVERYTHING LIVESRegistrar, DNS provider, and who has access.... DNS Emergencies and What to Do When something is seriously wrong.THE DOMAIN DOES NOT RESOLVE AT ALLCheck expiry first. An... DNS for a Domain You Are Not Yet Using Parked and held domains.THE SITUATIONA domain registered for future use, or defensively, with no... DNS Records for Common Services What various services ask for.SEARCH CONSOLEA TXT record at the bare domain, or a file on the... DNS Security Considerations Protecting your domain's records.WHAT AN ATTACKER GAINS FROM CONTROLLING YOUR DNSThe ability to... DNS Security Threats What goes wrong.CACHE POISONINGInjecting false data into a resolver's cache, directing users... Documents and File Handling on macOS Working with user files.WHAT A DOCUMENT-BASED APPLICATION ISOne where each window represents a... Edge and Digital Twins: Everything That Matters, Briefly The summary.EDGE COMPUTING EXISTS BECAUSE DISTANCE IMPOSES LATENCY THAT BANDWIDTH CANNOT... Email Security on Devices Protecting your mail.WHAT TO DOLock every device Keep them updated Use encrypted connection... Email Sending Limits and Our Spam Policy Shared hosting enforces hourly sending limits. They protect the server's mail reputation for... Email, Privacy and the NDPR If you hold customer correspondence, you hold personal data.WHAT THIS MEANS IN PRACTICEMailboxes... Embedded Security Protecting devices in the field.WHAT TO ASSUMEThe device is physically accessible to an attacker... Emergency Access Arrangements When you are unavailable.THE PROBLEMIf only you can access everything, your absence stops the... Emergency Procedures and Safety When something serious happens.WHAT PROCEDURES SHOULD EXISTFire evacuation Medical emergency... Enabling and Using SSH Access SSH gives you command-line access to your account, useful for WP-CLI, Composer, Git and large... Enabling Free SSL and Forcing HTTPS on WordPress Every domain hosted with us is entitled to a free AutoSSL certificate. Once it is issued you... Enabling Two-Factor Authentication on Your Accounts Two-factor authentication (2FA) means a stolen password alone is not enough to get in. It is the... Enabling Two-Factor Authentication on Your Client Area Anyone with your billing login can reach your services, your domains and your cPanel. Protect... Enrolling and Configuring Devices Bringing devices under management.WHAT ENROLMENT METHODS EXISTUser-driven enrolment Automatic... Environmental and Social Considerations Wider effects.WHAT THE ENERGY DEBATE CONCERNSWork-based consensus consuming substantial... EPP and Authorisation Codes An EPP code, also called an authorisation or auth code, is the password proving you control a... ERR_CONNECTION_TIMED_OUT The browser could not reach the server at all.WHAT IT MEANSNo response. This is a network-level... ERR_SSL_PROTOCOL_ERROR The secure connection could not be established at all.WHAT IT MEANSThe handshake failed before... Error 1020: Access Denied A firewall rule blocked the request.WHAT IT MEANSOne of your Cloudflare firewall rules matched... Error 521: Web Server Is Down Cloudflare could not connect to us.WHAT IT MEANSOur server refused the connection, or is not... Evaluating an Application Before You Commit Questions to ask.MAINTENANCEWhen was the last release? Is there active development? How quickly... Evaluating Blockchain Proposals Assessing whether it is warranted.WHAT TO ASK FIRSTWho are the participants? Do they trust each... Evaluating Information and Sources Online Judging what you find.WHAT TO ASKWho published this? When? What do they gain? What is it based... Every Way to Order, Summarised Routes to placing an order.THROUGH THE WEBSITEzillionkinghost.com, using the navigation... Existing Applications: Everything That Matters, Briefly The summary.WHEN INHERITING AN APPLICATIONBack up, change every credential you control, and put... Exporting and Owning Your List Your asset, not the platform's.WHY IT MATTERSPlatforms change pricing, change terms, suspend... Extension Security and Privacy Handling a privileged position.WHAT AN EXTENSION CAN DORead everything on pages it has access to,... Extensions Most Stores Actually Need A short list, in the order most shops should add them.ESSENTIALYour payment gateway plugin An... Fair Use of Shared Hosting Resources Shared hosting works because typical websites use resources in short bursts. A few patterns break... File Management: Everything That Matters, Briefly The whole category in one page.THE MOST IMPORTANT THING TO UNDERSTANDAnything in public_html is... Filming Events Covering something that happens once.WHAT MAKES IT DIFFICULTNothing can be repeated Lighting is... Finding Mixed Content on Your Site Locating exactly what is insecure.THE BROWSER CONSOLEOpen the page, press F12, and read the... Finding Reliable Help Online Answers that work.WHAT TO SEARCH FORThe exact error message, in quotation marks The software name... Finding Your Login Details After Ordering Where everything is.YOUR WELCOME EMAILSent after your service is set up. It contains:Your cPanel... Finding Your Way Around the Client Area Everything is reachable from the main menu.THE DASHBOARDShows active services, unpaid invoices,... Finding Your Way Around the cPanel Interface cPanel groups every tool into sections. If you know the section, you will find the tool... Firebase Authentication Identifying users.WHAT IT PROVIDESSign-in with email and password, phone, and federated providers... Firebase Hosting and Web Delivery Serving web content.WHAT IT PROVIDESStatic content served from a delivery network Automatic... Firestore Security Rules The critical configuration.WHAT THEY DODetermine what each client may read and write, evaluated... Firewalls and Network Protection Filtering traffic.WHAT A FIREWALL DOESControls what traffic is allowed in and out.WHERE THEY... Firmware Update and Recovery Changing software in the field.WHY IT IS DIFFICULTDevices may be inaccessible, unattended,... First Steps With a New Server What to do before anything else.THE ORDER THAT MATTERSSecure it before you use it.STEP ONE:... Fixing "Sorry, This File Type Is Not Permitted for Security Reasons" WordPress only allows a fixed list of file types in the media library. Option 1 — use an allowed... Fixing 404 Errors on Every Page Except the Homepage If the homepage loads but every other page returns "Page not found", the rewrite rules are... Fixing Mixed Content Warnings A broken padlock on an HTTPS site means some resources are still being requested over plain... Fixing Mixed Content Warnings After Switching to HTTPS A "Not secure" warning or a broken padlock on an HTTPS site usually means some images, scripts or... Fixing the WordPress Login Page Refresh Loop You enter correct credentials, the page reloads, and you are back at the login form with no... Following Developments Without Hype Staying informed sensibly.WHAT MAKES THIS SECTOR DIFFICULT TO FOLLOWSubstantial financial... Forcing HTTPS on Your Website Once a certificate is issued, all traffic should be forced to HTTPS so nobody lands on the... Formatters, Linters and Static Analysis Automated quality checks.WHAT A FORMATTER DOESApplies consistent formatting automatically.WHAT... Forms and Input Elements Collecting information.WHAT A FORM REQUIRESFields Labels associated with each A submission method... Forms for Different Purposes Matching the form to the job.A CONTACT FORMThree fields. Name, contact, message.Do not ask for... Free Versus Paid Plugins The comparison.FREE PLUGINS FROM THE DIRECTORYReviewed before listing Community support... Free Versus Paid SSL Certificates A common question, and the answer is less dramatic than certificate vendors suggest.WHAT IS... Free Versus Paid Themes The honest comparison.FREE THEMES FROM THE OFFICIAL DIRECTORYReviewed before listing Usually... FTP and SFTP Encryption Transferring files securely.PLAIN FTPSends your username and password unencrypted. Anyone on the... Getting Data Out of Your Systems Exports.WHERE DATA LIVESAccounting software Shop platform Payment gateway Website analytics... Getting Help With Legal Pages Who to ask.WHAT WE CAN HELP WITHTechnical measures: HTTPS, access control, backups, securing... Getting Search Warnings Removed When your site is flagged.WHAT HAPPENSSearch engines and browsers warn visitors that your site is... Getting Started With Laravel: Everything That Matters, Briefly The summary.WHAT THE FRAMEWORK BUYS YOURouting, database access, templating, authentication,... Getting Support for a VPS What we help with, and what is yours.WITH AN UNMANAGED VPSWe are responsible for the... Getting Your Domain Removed from Email Blacklists A blacklist listing means receiving servers reject or filter your mail. Listings follow spam... Giving a Developer Access Safely Handing over your main cPanel login gives one person total control of every site, mailbox and... Giving Remote Workers Access Security and practicality.WHAT TO GIVETheir own account for every system The minimum access... Google Cloud Compute Options Where code runs.WHAT COMPUTE ENGINE PROVIDESVirtual machines you control entirely.What it suits:... Google Cloud Security Practices Protecting cloud resources.WHAT TO CONFIGURE FIRSTMulti-factor authentication for every account... Google Cloud Storage Object storage.WHAT IT PROVIDESStorage for files and unstructured data, addressed by name within... Governing Business Systems Oversight over time.WHAT GOVERNANCE SHOULD COVERWhich systems exist and who owns them What each... Group Policy Centralised configuration.WHAT IT DOESApplies configuration to users and computers... Growing Beyond a Single Reseller Plan Scaling up.THE SIGNSYour allocation consistently near its limits Resource contention between... Handing a Project Over to a Client Leaving a site someone else can maintain.WHAT TO PROVIDECredentials for everything, transferred... Handing Over a VPS to Someone Else Transferring operational responsibility.WHAT THE NEW OWNER NEEDSDocumentation of what runs and... Handling a Security Breach as a Provider When customer data is exposed.WHAT TO DO FIRSTContain it: stop the access, before anything... Handling Authentication in Frontend Applications Signed-in state.WHAT THE FRONTEND IS RESPONSIBLE FORPresenting sign-in Holding whatever the... Handling Client Data Responsibly Obligations that come with hosting for others.WHAT YOU HOLDYour clients' business data, their... Handling Customer Data as a SaaS Provider Obligations and expectations.WHAT ROLE YOU USUALLY HAVEProcessing data on behalf of your... Handling Database Credentials Securely The most valuable secret in most applications.WHERE THEY BELONGIn environment configuration: a... Handling File Uploads Securely One of the most exploited features in any application.THE RULESValidate the file type on the... Handling Forms and User Input Safely Accepting submissions.WHAT TO VALIDATEEvery field Type, length, format and range Whether required... Handling Forms in Applications Input in interactive interfaces.WHAT TO START FROMNative form elements and native submission... Handling Member and Student Data Personal information.WHAT YOU HOLDNames, email addresses, payment records, progress, sometimes... Handling Problems During a Project When things go wrong.COMMON PROBLEMSThe work is not what you expected Progress has stopped... Handling Security Incidents in Support When something is compromised.WHAT TO RECOGNISEReports of unexpected messages sent from a user's... Handling Sessions and State Where user state lives.DEFAULT BEHAVIOURPHP stores session data in files on the server by... Handling Traffic with a Reverse Proxy Nginx in front of an application server.WHAT IT DOESReceives requests, serves static files... Hardening Servers Reducing exposure.WHAT TO DOInstall only what is needed Disable services not in use Restrict... Hardening SSH Access The service most attacked on any server.THE ESSENTIAL CHANGESDisable password authentication once... Health Checks Reporting whether a system works.WHAT A HEALTH CHECK ISAn endpoint reporting whether the... Hiding Sensitive Files from Public Access Anything inside public_html is reachable by anyone who guesses the URL, whether or not you linked... Hosting a Framework Application When you need more than shared hosting.WHEN SHARED HOSTING SUFFICESYour framework exports static... Hosting Account Security Checklist Work through this list once, and re-check it every few months. Most compromised accounts we deal... How AutoSSL Renewal Works Renewal is automatic and requires nothing from you.THE PROCESSAutoSSL checks certificates on a... How Content Delivery Networks Work Serving from close to the user.WHAT THEY AREDistributed networks of servers holding copies of... How Copyright Complaints Are Handled We receive complaints from rights holders about content hosted on our servers. Here is how the... How Digital Assets Are Regulated The regulatory landscape.WHY IT IS FRAGMENTEDAssets cross borders while regulation does not, and... How HTTPS Works in Plain Terms A simplified account of what happens when a visitor loads a secure page.THE SEQUENCEThe browser... How Online Payments Work The parties involved.WHAT HAPPENS WHEN A CUSTOMER PAYSYour site sends the customer to the... How Payment Works Paying and being paid.FOR BUYERSYou pay the agreed amount when the sale is confirmed: on... How Sites Actually Get Compromised The common routes.OUT-OF-DATE SOFTWAREThe most common by a wide margin.A vulnerability is... How to Buy a Domain Without Hosting Registering a name only.WHEN THIS APPLIESSecuring a name before you build anything A defensive... How to Buy an SSL Certificate Ordering a certificate.FIRST, CONSIDER WHETHER YOU NEED ONEFree certificates through AutoSSL are... How to Buy CodeGuard Website Backup Automated off-site backups.WHAT IT DOESTakes automatic backups of your website files and... How to Buy Email Spam Filtering Reducing unwanted mail.WHAT IT DOESFilters incoming mail before it reaches your mailboxes,... How to Buy SiteLock Website Security Malware scanning and protection.WHAT IT DOESScans your website for malware and vulnerabilities,... How to Buy VPN Service Private browsing and secure connections.WHAT IT DOESRoutes your internet connection through an... How to Choose a Plugin What to check before installing.WHAT TO LOOK ATLast updated date Active installation count... How to Create a Subdomain A subdomain is a section of your existing domain, such as blog.yourdomain.com or... How to Enable Two-Factor Authentication (2FA) in Your ZillionKingHost Client Area What is Two-Factor Authentication? Two-Factor Authentication (2FA) adds an extra layer of... How To Hide Your WordPress Login Page from Hackers with Code There are 40 million brute force attacks on websites every day, so it’s highly likely your site... How to Join the Rewards Program Joining takes a minute and costs nothing.HOWLog in to your Client Area.Open the Rewards... HSTS and Minimum TLS Version Stricter encryption settings.HSTSTells browsers to use https for your domain for a stated period,... HSTS: Telling Browsers to Always Use HTTPS A header that eliminates the insecure first request.WHAT IT DOESHTTP Strict Transport Security... HTTPS and Encrypted Connections Protecting data in transit.WHAT HTTPS DOESEncrypts traffic between visitor and server.WHAT THAT... HTTPS and Security Signals Encryption as a factor.WHY IT MATTERSBrowsers mark sites without HTTPS as not secure.Visitors see... HTTPS and SEO What search engines actually do with it.WHAT IS TRUESearch engines prefer secure sites. HTTPS is... HTTPS and Third-Party Embeds Content from other sites must also be secure.WHAT THIS AFFECTSEmbedded videos Maps Social media... HTTPS Requirements for Payments and Compliance Where it stops being optional.PAYMENT PROCESSINGEvery reputable payment gateway requires https on... HTTPS, HTTP/2 and Site Speed Secure sites can be faster, not slower.THE OLD CONCERNEncryption adds processing overhead, so... Identifying Your Business Risks The honest inventory.HOW TO FIND THEMWalk through your business and ask what could stop it,... Identity Verification Technology Establishing who someone actually is.WHAT IT DIFFERS FROMAuthentication, which proves a returning... Identity, Privacy and Security: Everything That Matters, Briefly The summary.IDENTIFICATION, AUTHENTICATION AND AUTHORISATION ARE THREE DIFFERENT THINGSConflating... If You Have Been Defrauded What to do afterwards.WHAT TO DO FIRSTStop sending money, immediately, whatever is... If Your Mailbox Is Sending Spam A compromised mailbox is one of the most common abuse incidents we handle. The password was... Improving Legacy Code Safely Change without breaking.WHAT TO DO BEFORE ANY CHANGEVersion control A copy to work on A record of... Increasing Revenue from Existing Clients The easier growth.WHY IT IS EASIERThey already trust you. The hardest part is done.WHAT TO OFFERA... Infrastructure Security: Everything That Matters, Briefly The summary.WHOEVER CONTROLS THE PIPELINE CONTROLS PRODUCTIONProtect it as tightly as production... Inside the Data Hall: Everything That Matters, Briefly The summary.PLAN THE RACK BEFORE INSTALLING ANYTHINGHeavier equipment lower, nothing obstructing... Insider Risk, Accidental and Deliberate Harm from within.WHAT IT MOSTLY ISAccidents.A file shared broadly, an email to the wrong person,... Installing a Third-Party PHP Script Small utilities and custom tools.BEFORE INSTALLING ANYTHINGWhere did it come from? Only install... Installing and Removing Software Managing what is present.WHERE SOFTWARE SHOULD COME FROMThe vendor An official distribution... Installing and Securing a Database Server MySQL or MariaDB on your own machine.INSTALLINGInstall the package, then run the secure... Installing Equipment in a Rack Physical installation.WHAT TO PREPAREThe rails or mounting hardware The correct tools Labels An... Installing Laravel Getting a project started.WHAT YOU NEEDA supported PHP version Composer The required PHP... Installing PHP and Required Extensions Getting the application runtime in place.CHOOSING A VERSIONUse the newest version your... Installing Software on Your Server Adding what you need.USE THE PACKAGE MANAGERYour system's package manager installs software with... Installing SSL Certificates on a VPS Securing sites on a server you manage.WITH A CONTROL PANELAutoSSL or an equivalent handles issue... Insurance and Risk for Media Businesses Protecting against what goes wrong.WHAT CAN GO WRONGEquipment stolen or damaged Someone injured... Insurance and Risk for Online Businesses Thinking about what could go wrong.THE RISKSStock damaged or lost A delivery that never arrives A... Invoice Fraud and Business Email Compromise A costly fraud that targets businesses through email.HOW IT WORKSAn attacker gains access to a... IoT Device Management: Everything That Matters, Briefly The summary.UNIQUE CREDENTIALS PER DEVICE, ALWAYSA shared credential means compromising one... IoT Security: Everything That Matters, Briefly The summary.A COMPROMISED SENSOR LEAKS INFORMATION; A COMPROMISED ACTUATOR CAUSES EVENTSWhich is... IP Blocking and Your Own Address The firewall blocks addresses that behave suspiciously, and sometimes that is yours.WHY YOU MIGHT... IT Asset Management Knowing what you own.WHAT AN ASSET ISAnything of value to be tracked: devices, software licences,... IT Service and Asset Management: Everything That Matters, Briefly The summary.ORGANISE AROUND SERVICES, NOT TECHNOLOGYUsers do not care which server failed; they... Java, .NET and Ruby: Everything That Matters, Briefly The summary.THESE FRAMEWORKS TRADE FLEXIBILITY FOR CONSISTENCYStrong conventions, dependency... Keeping a Laravel Application Maintained Ongoing care.WHAT TO DO REGULARLYApply framework and dependency updates Check for security... Keeping a Server Updated The maintenance that matters most.WHY IT MATTERSMost compromises exploit known vulnerabilities... Keeping Client Sites Updated The maintenance problem.THE PROBLEMUnmaintained client sites get compromised. That becomes your... Keeping Devices Updated The foundation.WHAT TO UPDATEOperating systems Applications Browsers and extensions Firmware,... Keeping Records Securely Protection and privacy.WHAT YOUR RECORDS CONTAINCustomer names and addresses Payment information... Keeping Research Records Documentation that protects you.WHAT TO KEEPNotes, with sources Drafts, dated Data, raw and... Keeping Skills and Projects Current Maintenance that is not about any single site.WHAT GOES STALEPHP versions, which reach end of... Keeping Software Patched on a VPS The discipline that prevents most compromises.WHAT NEEDS PATCHINGThe operating system and its... Keeping Themes and Builders Updated Maintenance.WHY UPDATESecurity fixes Compatibility with WordPress updates Bug fixesTHE... Keeping Up With Web Development Staying current without exhaustion.WHAT CHANGES FREQUENTLYFrameworks and libraries Tooling... Keeping Up Without Becoming Overwhelmed Staying current sensibly.THE PROBLEMSecurity information is endless and mostly not about you.WHAT... Keeping Your Client Area Account Secure This account controls your services, your domains and your billing. Secure it accordingly.THE... Keeping Your Rewards Account Secure A balance is value, and the account controls more than rewards.THE BASICSA long, unique password... Keeping Your Website Software Updated Out-of-date software is the leading cause of hacked websites on shared hosting. Attacks are... Keeping Your Website Updated Maintenance that prevents problems.WHAT NEEDS UPDATINGThe platform itself Themes Plugins and... Keeping Your ZillionKingHost AI Account Secure Protecting access.THE ESSENTIALSA strong unique password Additional verification where available... Kinds of Business Insurance What generally exists.PROPERTY AND CONTENTSDamage to premises, equipment and stock.PUBLIC... Knowing What Data You Hold The audit.WHY IT MATTERSYou cannot meet obligations about data you have not identified.WHERE... Language Concepts: Everything That Matters, Briefly The summary.LANGUAGES TRADE OFF SPEED OF WRITING, SPEED OF RUNNING, SAFETY AND CONTROLNone... Layers of Physical Security Defence in depth.WHAT THE LAYERS AREThe perimeter: fencing, barriers, lightingThe building... Legitimate Visitors Being Blocked Protection catching the wrong people.THE SYMPTOMSCustomers reporting they cannot reach the site A... Location Scouting and Permissions Choosing and securing where you film.WHAT TO ASSESS AT A LOCATIONLight, at the time you will... Logging In Safely Where and how.WHAT TO BE CAREFUL WITHPublic networks Shared computers Devices you do not control... Low-Code Platforms and Citizen Development Applications built by non-developers.WHAT THEY PROVIDEBuilding applications with limited coding... Mac Application Security and Privacy Protecting users on the desktop.WHAT THE SANDBOX RESTRICTSFile access Network access Hardware... Mac Distribution Options How Mac software reaches users.WHAT THE ROUTES AREThe Mac App Store Direct distribution from your... macOS Development: Everything That Matters, Briefly The summary.CLOSING THE LAST WINDOW DOES NOT QUIT A MAC APPLICATIONAnd the menu bar must contain... macOS Security Configuration Hardening a Mac.WHAT TO ENABLEFull disk encryption Automatic screen lock with a short timeout The... macOS Storage, Volumes and Time Machine Disks and backups.WHAT THE CURRENT FILE SYSTEM PROVIDESSnapshots Space shared between volumes in... Maintaining a Website Over Time Ongoing care.WHAT REQUIRES ATTENTIONDependency and platform updates Certificate and domain... Maintaining and Upgrading Keeping systems current.WHY UPGRADES MATTERSecurity fixes Support for current versions only... Maintaining Client Sites Ongoing work after launch.WHAT MAINTENANCE ACTUALLY INVOLVESApplying core, plugin and theme... Making Sure Your Site Can Be Crawled The prerequisite for everything else.WHAT CAN PREVENT CRAWLINGrobots.txt disallowing the site or... Malware Scanning Checking for infection.WHAT SCANNING FINDSKnown malicious code Modified core files Suspicious... Managed Versus Self-Managed The decision that matters most.SELF-MANAGEDYou handle everything: operating system updates,... Managed Versus Unmanaged VPS The most important decision you will make about a VPS.UNMANAGEDYou get the machine and root... Managed VPS Versus Self-Managed If you do take a VPS.SELF-MANAGEDYou handle everything: operating system updates, security,... Managing Backups Securely Backups as both protection and risk.WHY BACKUPS ARE BOTHThey are what saves you.They also contain... Managing Browser Security Where most risk arrives.WHY THE BROWSER MATTERSMost compromise arrives through it.WHAT TO DOKeep... Managing Certificates and Identifiers Developer account administration.WHAT AN APPLICATION IDENTIFIER ISA registered identifier, with... Managing Dependencies on Open Source Relying on others' code.WHAT THE RISKS AREAbandonment Breaking changes Security vulnerabilities... Managing Dependencies Over Time Keeping libraries current.THE TENSIONUpdating breaks things. Not updating accumulates... Managing Dependencies Safely Third-party code is most of your application.THE PRINCIPLEEvery dependency is code you did not... Managing Devices Across a Small Team Multiple machines.WHAT TO ESTABLISHWhich devices exist Who holds each Whether each is current... Managing Devices Across an Organisation Fleet management.WHAT TO STANDARDISEHardware specifications, by role The operating system version... Managing Devices on Your Network Keeping track.WHAT TO RECORDEvery device What it is and who uses it Whether its address is fixed... Managing Distributed Edge Estates Operating many small locations.WHAT THE CHALLENGE ISMany locations, few or no staff, variable... Managing Environments Development, testing and production.WHAT ENVIRONMENTS ARE NEEDEDLocal development A shared... Managing Extensions and Plugins Safely Third-party code running on your site.BEFORE INSTALLINGWhen was it last updated? Anything... Managing Frontend Dependencies Packages and versions.WHAT TO COMMITThe dependency declaration, and the lock file.WHY THE LOCK... Managing Identities and Groups Organising who is who.WHAT IDENTITY TYPES EXISTMembers, belonging to your organisation Guests,... Managing Language and Runtime Versions Keeping current.WHY IT MATTERSUnsupported versions receive no security fixes, and falling behind... Managing Network Security in a Facility Protecting connectivity.WHAT TO SEPARATECustomer networks from each other Management networks... Managing Packages and Software Installing, updating and removing software.THE PACKAGE MANAGERSapt on Debian and Ubuntu dnf on... Managing Saved Payment Methods Billing > Payment Methods holds the cards used for automatic renewals.ADDING A CARDAdd the... Managing Server Updates Keeping systems current.WHY IT MATTERS MOSTKnown vulnerabilities are published and scanned for... Managing Sessions and Authentication Identifying users.WHAT A SESSION ISA way of remembering a visitor between requests.HOW IT WORKSAn... Managing Sessions Securely Keeping people signed in.WHAT A SESSION ISData associated with a visitor across requests,... Managing Software Assets and Licences Compliance and cost.WHAT TO TRACKEvery application in use The licence under which it is used How... Managing Startup and Background Programs What runs without asking.WHAT HAPPENS OVER TIMEPrograms add themselves to startup, and the... Managing Team Access to ZillionKingHost AI Who can use what.THE PRINCIPLEEach person who uses it should have their own access, not a shared... Managing Technical Debt Accumulated shortcuts.WHAT IT ISWork deferred, which makes future work slower.WHERE IT COMES... Managing Test Environments Where testing happens.WHAT ENVIRONMENTS TYPICALLY EXISTLocal development Shared development or... Managing Updates and Software Versions Controlling what runs.WHY IT MATTERSUpdates contain security fixes, and unsupported versions... Managing Updates Safely Without breaking your site.THE PROCESSBack up Update on staging first, for anything significant... Managing Users and Licences Day-to-day administration.WHAT TO DO WHEN SOMEONE JOINSCreate the account, with a standard naming... Managing Users, Groups and Organisational Units Directory administration.WHAT TO ESTABLISHA naming convention for accounts and groups An... Managing Vendors and Dependencies Services your product relies on.WHAT TO MAINTAINA list of every service, what it does, what it... Managing Who Has Access Accounts and permissions.THE PRINCIPLEEach person has their own account, with the minimum access... Managing Windows Devices With Intune Endpoint configuration.WHAT TO CONFIGUREDisk encryption, with keys escrowed Update rings,... Memory Management Approaches Who frees memory.MANUAL MANAGEMENTThe programmer allocates and frees explicitly.What it provides:... Microsoft 365 Security Configuration Protecting the tenant.WHAT TO ENABLE FIRSTMulti-factor authentication for every account.WHYIt... Microsoft Azure: Everything That Matters, Briefly The summary.CHOOSE THE MOST MANAGED OPTION THAT MEETS THE REQUIREMENTEvery layer you manage is a... Microsoft Licensing Fundamentals How products are paid for.WHAT LICENSING IS BASED ONPer user, for most productivity and identity... Microsoft Technology: Everything That Matters, Briefly The whole category in one page.IDENTITY CONNECTS EVERYTHINGAlmost every product authenticates... Migrating Between PHP Versions Upgrading without breaking the site.BEFORE CHANGINGCheck your application's stated compatibility... Migrating to a New VPS Moving from one server to another.PLANNINGBuild the new server fully before touching the old one... Mixed Content from External Resources When the insecure resource is not yours.THE SITUATIONThe console names a URL on another domain:... Mixed Content in CSS and JavaScript Files Harder to find because the URL is inside a file rather than in the database.HOW IT HAPPENSA... Mobile Application Security Fundamentals What is different on a device.WHAT TO ASSUMEThe device may be compromised or rooted The... Mobile Authentication Establishing who the user is.WHAT OPTIONS EXISTEmail and password One-time codes by message... Mobile Data and Backends: Everything That Matters, Briefly The summary.OLD APPLICATION VERSIONS PERSIST FOR MONTHSSo the backend must stay backward... Mobile Security: Everything That Matters, Briefly The summary.THE CLIENT CANNOT BE TRUSTED, EVEREvery authorisation decision belongs on the server.... Modernising an Old Website Without a Rebuild Improving what you have.WHAT CAN BE FIXED WITHOUT REBUILDINGSpeed: images, caching, removing... Modular and Prefabricated Facilities Building differently.WHAT THEY AREFacilities assembled from prefabricated units, rather than... Monitoring a Hosting Fleet Watching many machines.WHAT TO MONITOR PER MACHINEAvailability, from outside Load, memory,... Monitoring Account Activity Noticing problems early.WHAT TO MONITORSuccessful logins, and from where Failed login attempts... Monitoring Azure Resources Understanding what is running.WHAT MONITORING PROVIDESMetrics for every resource Logs, collected... Monitoring for Changes Knowing when something happens.WHAT TO MONITORFile changes New user accounts Failed and... Monitoring Payment Security Watching for attack.WHAT TO MONITORAuthentication failures Authorisation failures Transaction... Monitoring Your Network Noticing problems.WHAT TO WATCH FORDevices you do not recognise Unusual traffic volumes Slowness... Monitoring Your Site's Search Health A routine that catches problems early.MONTHLYSearch Console performance: is traffic trending up,... Moving from Reseller Hosting to a VPS A VPS gives control. It also gives you a server to look after.WHEN IT IS WARRANTEDYou need root... Moving From Shared Hosting to a VPS Making the transition.BEFORE YOU MOVEConfirm you actually need it Decide managed or self-managed... Moving From Static to WordPress Going the other direction.WHY PEOPLE DO ITThe owner cannot edit the static site They need a shop,... Moving From WordPress to Static Converting a site.WHY PEOPLE CONSIDER ITSpeed Security Reduced maintenance Lower resource useWHAT... MQTT in Practice Practical use.WHAT A LAST WILL MESSAGE ISA message the broker publishes if a device disconnects... My Site Was Hacked and Search Traffic Collapsed The most damaging thing that can happen to a site's search presence.WHAT HAPPENEDSearch engines... Naming a SaaS Product Choosing what to call it.WHAT A NAME MUST DOBe sayable Be spellable after hearing it Be findable... NET::ERR_CERT_AUTHORITY_INVALID The browser does not trust whoever issued the certificate.WHAT IT MEANSThe certificate was not... Network Printers and Shared Equipment Shared devices.WHAT TO CONFIGUREA reserved address, so it does not move A changed administrative... Network Security on Apple Platforms Protecting traffic.WHAT IS ENFORCED BY DEFAULTEncrypted connections, with plain traffic... Network Security: Everything That Matters, Briefly The summary.THE SINGLE MOST IMPORTANT STEPChange your router's default administrator... Network Segmentation Separating traffic.WHY IT MATTERSFlat networks allow anything to reach anything, so one... Networking for Cameras and Security Systems Surveillance equipment.WHAT IT CONSUMESContinuous bandwidth, and substantial storage.WHAT TO PLAN... Networking for Connected Business Equipment Machines and sensors.WHAT THIS COVERSEquipment with network connections: machinery, sensors,... Networking for Digital Displays and Media Screens and streaming.WHAT IT CONSUMESContinuous download, particularly for video.WHAT TO PLAN... Networking for File Sharing and Storage Shared files.THE OPTIONSStorage on the local network Cloud storage A combinationLOCAL STORAGEFast... Networking for Remote Access to Your Own Systems Reaching your premises.WHEN THIS ARISESAccessing files, equipment or applications at your... Networking for Specific Needs: Everything That Matters, Briefly The summary.THE MEASUREMENT THAT MATTERS FOR CALLS AND VIDEOConsistency, not speed. Jitter and... Node.js and Express: Everything That Matters, Briefly The summary.THE EVENT LOOP EXCELS AT CONNECTIONS, NOT COMPUTATIONBlocking it stalls every... Notifications and Digests Telling users what happened.WHAT TO NOTIFY ABOUTThings requiring action Things affecting them... Offering a Public API Letting others build on you.WHAT IT PROVIDESCustomers automating their own work Partners building... Offering Managed WordPress as a Product Specialising in one platform.WHAT IT MEANSHosting configured specifically for WordPress, with... Offering Security Hardening and Cleanup Two related services.HARDENINGApplied once: permissions, admin protection, two-factor, removing... Onboarding a New Client The first two weeks.WHAT TO ESTABLISH BEFORE ANYTHINGWhat they need: how many sites, mailboxes,... Onboarding and Offboarding Access Starting and ending.WHEN SOMEONE JOINSCreate individual accounts Give the minimum access needed... Operating System Choices for a VPS Which Linux distribution, and why it matters less than people think.THE COMMON CHOICESAlmaLinux... Operating System Development Building a system.WHY PEOPLE DO ITLearning how computers actually workSpecialised requirements:... Ordering a Dedicated Server Full control of a machine.WHO IT SUITSApplications requiring software we cannot install on shared... Ordering a Domain Only You can register a domain with us without buying hosting.HOWSearch for the domain from the Client... Ordering a VPS A VPS gives dedicated resources and root access. It also transfers server management to you... Ordering an SSL Certificate Free AutoSSL covers almost every site. Order a paid certificate only where there is a specific... Ordering Extras With Your Hosting Options available at checkout.WHAT MAY BE OFFEREDA dedicated IP address Additional disk space... Ordering Hosting With a New Domain Buying both together.THE ROUTEStart from the hosting product. At the domain step, choose to... Orders Stuck on Pending Payment Payment succeeded at the gateway but the order never updated.THE USUAL CAUSEThe gateway's webhook... Our Acceptable Use Policy in Plain English The full policy is on our website. This article explains what it means in practice.NOT PERMITTED... Our Terms of Service in Brief The full terms are on our website and are what govern the relationship. This is a plain summary;... Out-of-Band Management Access independent of the network.WHAT IT ISA separate path to manage equipment, independent of... Packaging and Plans Structuring what is sold.WHAT PACKAGING DECIDESWhich capabilities belong to which tier.WHAT... Packing Orders Properly Protecting the goods.WHY IT MATTERS HERENigerian delivery is not gentle.Under-packaging costs... Page Rules and Cache Rules Configuring behaviour per URL.WHAT THEY DOApply settings to URLs matching a pattern: caching... Paid SSL Certificates Free AutoSSL suits almost every site. Occasionally a paid certificate is genuinely required.WHEN... Passwordless Authentication Removing the password.WHAT IT MEANSAuthenticating without a shared secret the user must... Paying by Card Online The fastest method.THE PROCESSAt checkout, choose your preferred gateway: Flutterwave, Paystack,... Payment Card Industry Compliance Card data security standards.WHAT THE STANDARD ISA set of requirements imposed by the card... Payment Gateway Not Appearing at Checkout The method is enabled but customers cannot see it.CHECK THESEIs it actually enabled? WooCommerce... Payment Security: Everything That Matters, Briefly The summary.BROKEN OBJECT-LEVEL AUTHORISATION IS THE COMMONEST SERIOUS FAULTAuthenticating a... Performance and Security Testing: Everything That Matters, Briefly The summary.REPORT PERCENTILES, NOT AVERAGESAverages conceal the slow requests users actually... Phishing Content Found on Your Account Phishing pages are treated as the most urgent category of abuse after child protection, because... PHP and Laravel: Everything That Matters, Briefly The whole category in one page.RUN A SUPPORTED PHP VERSION AND A SUPPORTED FRAMEWORK... PHP as a Backend Language Today The current state.WHAT HAS CHANGEDSubstantially improved performanceModern language features:... PHP Configuration: Everything That Matters, Briefly The whole category in one page.THE VERSIONUse a current supported one. Newer is faster and... PHP Fundamentals: Everything That Matters, Briefly The summary.RUN A SUPPORTED VERSIONUnsupported versions receive no security fixes, which is a... PHP Security: Everything That Matters, Briefly The summary.PARAMETERISE EVERY QUERYWithout exception. Dynamic column and table names cannot be... Physical Security and Cyber Risk The overlap.WHY IT MATTERSA device in someone's hands bypasses most digital defences.WHAT TO... Physical Security: Everything That Matters, Briefly The summary.SECURITY IS LAYEREDPerimeter, building, zone, hall, rack. Each must be defeated in... Playbook: I Think I Have Been Hacked Security incidents.ESTABLISH FIRSTWhat did they notice? When? What have they already done?WHAT TO... Plugin Settings and Configuration Getting them right.THE COMMON MISTAKEInstalling and activating without configuring.Default... Plugins and Security The main route of compromise.THE FACTSOutdated plugins are the most common way WordPress sites... Plugins and Site Speed The performance cost.HOW PLUGINS SLOW A SITELoading scripts and styles on every page, including... Plugins Most Sites Actually Need A realistic list.WHAT ALMOST EVERY SITE NEEDSCaching Backups A security or firewall plugin An SEO... Plugins to Be Careful With Where problems come from.STATISTICS PLUGINSRecording every visit to your own database turns every... Port Forwarding and Exposing Services Making something reachable.WHAT IT ISConfiguring your router to send inbound connections on a... Portfolio and Creative Sites Showing work.WHAT MATTERSImage quality, balanced against page weight Fast loading, since visitors... Power Platform Environments and Solutions Structuring development.WHAT AN ENVIRONMENT ISA container for applications, flows and data, with... Power, Cooling and Physical Considerations The unglamorous part.WHY IT MATTERSNetwork equipment fails from heat, power problems and physical... Preparing a Backend for Production Before it serves real traffic.WHAT TO VERIFY IN CONFIGURATIONDebug disabled Errors logged, not... Preparing a Site for Deployment Before it goes live.WHAT TO BUILDProduction output: compiled, minified, with versioned... Preparing an Application for Release Before submission.WHAT TO VERIFY IN THE BUILDRelease configuration, not debug Debugging and... Presenting Yourself Professionally Small things that matter.EMAIL ON YOUR OWN DOMAINA hosting provider emailing from a free mail... PrestaShop and Other Shop Platforms Alternatives to WooCommerce.PRESTASHOPA dedicated ecommerce platform rather than a plugin on a... PrestaShop: Setup Notes A dedicated ecommerce platform.INSTALLINGSoftaculous or manually. Requires a supported PHP... Preventing Abuse of wp-cron.php and xmlrpc.php Two WordPress files are routinely abused to generate load and to test passwords at high speed.... Preventing Cross-Site Scripting Content interpreted as code.WHAT IT ISSubmitted content displayed in a page and executed by the... Preventing Data Leakage Between Customers The failure that ends businesses.WHY IT IS CATASTROPHICIt is a breach, it is reportable, and... Preventing Image Theft with Hotlink Protection Hotlinking is when another website embeds your images using your URL, so your hosting account... Preventing Malicious File Uploads Where attacks get in.THE RISKA form allowing file uploads, exploited to upload an executable... Preventing Mixed Content in New Content Stopping it happening again.WHERE IT COMES FROMSomeone pasting an image URL copied from an http... Preventing Scripting Attacks in the Browser Content executed in the browser.WHAT IT ISSubmitted content rendered into a page and executed by... Pricing a SaaS Product Deciding what to charge.WHAT TO PRICE AGAINSTThe value to the customer.WHAT NOT TO PRICE... Prioritising Support Requests Deciding what comes first.WHAT DETERMINES PRIORITYImpact: how many people or how much of the... Privacy Engineering Building systems that protect people.WHAT IT ISApplying engineering practice to privacy... Privacy Notices and the NDPR Nigerian data protection considerations.WHAT THE NDPR ISThe Nigeria Data Protection Regulation,... Programmatic Access Connecting software, where enabled.WHAT IT ISAccess allowing your own software to read or manage... Programming Languages: Everything That Matters, Briefly The whole category in one page.EVERY LANGUAGE TRADES OFF SPEED OF WRITING, SPEED OF RUNNING,... Progressive Web Applications Web applications with application-like behaviour.WHAT THEY PROVIDEInstallation to the device... Project Management and Team Tools Self-hosted collaboration.THE OPTIONSSelf-hosted project management applications Hosted services... Prompt Injection and Why It Matters A security consideration.WHAT IT ISInstructions hidden in content the AI processes, designed to... Prompt Templates for Technical Work Adaptable structures.FOR EXPLAINING CODE"Explain what this code does, line by line, for someone... Prompts for Technical Work Adaptable starting points.EXPLAINING CODE"Explain what this does, for someone who knows... Proof of Stake Security through committed value.HOW IT WORKSParticipants lock holdings as collateral, and are... Proof of Work Security through computation.HOW IT WORKSParticipants compete to find a value producing a hash... Protecting Against Common Mobile Vulnerabilities Known weaknesses.INSECURE DATA STORAGESensitive values in preferences, files, logs or... Protecting Customer Data on Your Website If your site collects names, emails, phone numbers or orders, you are responsible for looking... Protecting Online Stores and Payment Pages If you take payments, the security expectations are higher and the consequences of a compromise... Protecting the Business When Someone Leaves Continuity.WHAT TO SECUREAccess to all systems Files and documents Work in progress Customer... Protecting Your Account Security.WHY IT MATTERSAn account that can buy and sell domains is worth attacking.WHAT TO DOA... Protecting Your Accounts From Takeover Account security against fraud.WHICH ACCOUNTS ARE TARGETEDEmail Hosting Domain registrar Payment... Protecting Your Business Online The security measures that matter most.FOR YOUR ACCOUNTSStrong unique passwords on hosting,... Protecting Your Origin Server Address Preventing Cloudflare being bypassed.THE PROBLEMIf an attacker learns the address of our server,... Protecting Your Own Business Domains Defensive registration.WHAT THIS MEANSRegistering names to protect your business rather than to... Protecting Your Website's Admin Area The login page of any content management system is attacked constantly by automated tools. These... Protecting Yourself Practical precautions.WHAT TO ESTABLISH BEFORE ANYTHING ELSEThat you can afford to lose whatever... Provisioning a New Server Setting one up.WHAT TO DO IN ORDERCreate the server Secure access immediately Apply all updates... Public and Private Addresses The difference.PRIVATE ADDRESSESUsed inside local networks.Reserved ranges that are not routed on... Python: Everything That Matters, Briefly The whole category in one page.SET UP EVERY PROJECT THE SAME WAYPython 3, a virtual environment,... Quality Attributes and Non-Functional Requirements What the system must be, not only do.WHAT FUNCTIONAL REQUIREMENTS DESCRIBEWhat the system... Questions to Ask a Hosting or Facility Provider Before committing.ABOUT THE FACILITYWhere is it, precisely? Who operates it? What certifications... Questions to Ask Before Starting SEO Work Clarifying what you are trying to achieve.ABOUT THE BUSINESSWho are your customers, specifically... Reading a Policy Properly What the document says.WHAT TO READAll of it, particularly the exclusions.WHY THE EXCLUSIONSMost... Reading Announcements and Service Notices Support > Announcements carries the notices worth reading rather than deleting.WHAT APPEARS... Receiving Payment From International Clients Digital assets in business.WHY IT IS CONSIDEREDSome clients prefer it, and traditional routes can... Recognising Invoice Fraud and Business Email Compromise A common and costly fraud: someone monitors business email, then sends a message at the right... Recognising Phishing Emails That Pretend to Be Us Attackers send convincing emails claiming to be from your hosting provider, hoping you will type... Recognising That Something Is Wrong Early signs.ON A DEVICEUnexpected slowness Programs you did not install Security software... Recognising Threats and Working Safely Everyday security awareness.WHAT TO BE ALERT TOMessages about accounts asking you to sign in... Reconciling Your Bank Account Checking your records against reality.WHAT IT MEANSComparing your records against the bank... Recovering Failed Payments The cheapest revenue you will find.WHY IT MATTERSA substantial proportion of cancellations are... Recovering From a Compromised VPS The hardest situation to handle well.IMMEDIATE ACTIONSIsolate the server. Restrict network... Recovering From a Reputation Problem After something goes wrong.WHAT CAUSES THEMA serious failure affecting several customers A public... Redirect Loop After Enabling Cloudflare The most common Cloudflare complaint.THE CAUSEThe SSL mode is set to Flexible. Cloudflare... Reducing Risk Before Insuring It Prevention.WHY IT MATTERSPrevention costs less than claims, and claims raise premiums.Some... Reducing the Number of Plugins Every addition costs something.THE PROBLEMEach plugin loads code, styles, scripts and database... Registering a Domain Before You Register the Business Securing your name.WHY FIRSTDomain registration is immediate and inexpensive.Business... Remote Access and Working Away Reaching your systems securely.WHAT REMOTE ACCESS MEANSReaching business systems from outside... Remote Database Access Connecting from outside the server.WHAT IT ISPermitting a connection to your database from an... Removable Storage and File Sharing Moving files safely.THE RISKStorage devices carry malicious software between machines.WHAT TO... Removing a Google Security Warning or Blacklisting If Google flags your site, browsers show a red warning page and your traffic stops almost... Repeat Abuse and Account Termination We prefer to resolve issues and keep customers. Termination is a last resort, but it does... Reporting Abuse to Us If you believe a site hosted on our network is being used for phishing, malware, spam or other... Reseller Account Security Protecting what you are responsible for.WHY IT MATTERS MORE FOR YOUA compromise of your reseller... Reseller Account Security Checklist Your account holds access to every client you host. Treat it accordingly.YOUR ACCESSLong, unique... Reselling Microsoft Services Offering Microsoft 365 to customers.WHAT THE PARTNER ARRANGEMENT PROVIDESThe ability to sell... Resource Sharing Between Sites in One Account One account, several sites.WHAT IS SHAREDDisk space Bandwidth CPU and memory limits Inode count... Resources and Where to Learn More Continuing beyond this.IN THIS KNOWLEDGEBASEWebsite Content and Design Basics, for building and... Responding to IoT Security Incidents When devices are compromised.WHAT TO ESTABLISH FIRSTScope: which devices, and what they can... Retention: How Long to Keep Records Storage periods.WHAT DETERMINES ITLegal and tax requirements, which vary.WHAT TO DOAsk your... Reviewing Backend Code What to examine.CORRECTNESSDoes it do what it claims?Are edge cases handled: empty, missing, very... Reviewing Code Effectively Examining each other's work.WHAT IT ACHIEVESCatching defects Spreading knowledge Maintaining... Reviewing Code With ZillionKingHost AI A second pair of eyes.HOW TO ASK"Review this code. Identify: security issues, missing error... Reviewing Instead of Testing Finding defects without execution.WHAT STATIC TECHNIQUES AREExamining artefacts without running... Reviewing Web Code What to look for.CORRECTNESSDoes it do what it claims?Are edge cases handled: empty, missing,... Revoking Access When Staff or Contractors Leave Old credentials that were never revoked are a frequent route into hosting accounts, sometimes... Rollups and Scaling Networks Where activity is moving.WHAT A ROLLUP DOESExecutes transactions away from the main network,... Running Mail on Your VPS The most demanding service to run well.WHAT IT INVOLVESAn MTA for sending and receiving An IMAP... Running Postfix A widely used transfer agent.WHAT IT ISA modular transfer agent, designed for security and... Running PowerDNS A database-backed nameserver.WHAT DISTINGUISHES ITSeparation of the authoritative server, the... Safety on Shoots Protecting people and equipment.WHAT TO ASSESS BEFORE ANY SHOOTElectrical hazards Trip hazards... Sandboxing and Entitlements What applications may do.WHAT SANDBOXING ISRestricting an application to its own container and... Savings and Investment Products Holding funds for growth.WHAT THE COMMON PRODUCTS ARESavings with interest Fixed-term deposits... Scaling Approaches Handling more transactions.WHAT THE CONSTRAINT ISEvery node validating everything limits... Scanning Applications for Malware Finding what should not be there.IMUNIFYAVcPanel > ImunifyAV. Scan the full home directory... Scanning for Malware with ImunifyAV in cPanel ImunifyAV scans your hosting account for malware, backdoors and injected code at the server... Scanning Your Account for Malware ImunifyAV in cPanel scans your entire hosting account, independently of anything installed inside... Scanning Your Account for Malware with ImunifyAV ImunifyAV scans your whole hosting account for malware, backdoors and injected code,... Scheduled Maintenance and How We Notify You Servers need occasional maintenance: security patches, kernel updates, control panel upgrades and... Secure Coding Basics for Custom Websites If your site is custom-built rather than a packaged application, these are the issues that... Secure Deletion of Data Removing information properly.WHY DELETING IS NOT ENOUGHDeleted files usually remain recoverable... Secure Versus Insecure Settings Why encryption matters.WHAT INSECURE MEANSYour password and your mail cross the network in... Securing .NET Applications Protecting server-side code.WHAT TO IMPLEMENTAuthentication through an established provider... Securing a Laravel or Custom PHP Application Frameworks are secure by default in most respects, but deployment mistakes undo that.DOCUMENT... Securing a New Server The essentials.THE FIRST HOURApply all updates Change default credentials Create a non-root user... Securing Active Directory Protecting the directory.WHY IT MATTERS MOSTCompromise of the directory is compromise of... Securing AI Use in Your Organisation Practical controls.THE ESSENTIALSApproved tools, named Individual accounts, not shared Strong... Securing an API or Application Endpoint Certificates for things other than web pages.WHY IT MATTERSAn API accepting credentials or... Securing an Online Store Shops are a higher-value target than ordinary websites.WHY THEY ARE TARGETEDThey process... Securing and Managing Maps API Keys Preventing unauthorised use.WHY IT MATTERS MOST HEREA key in a public web page is visible to... Securing Any Web Application Principles that apply regardless of platform.THE ESSENTIALSKeep everything updated: core, themes,... Securing APIs Protecting endpoints.WHAT TO REQUIREEncryption, on every request Authentication, on everything... Securing Authentication in Web Applications Sign-in and sessions.WHAT TO USEEstablished libraries, not your own implementation.WHAT TO DO... Securing Business Email The account that controls everything.WHY IT MATTERS MOSTEmail controls password resets for nearly... Securing Connected Equipment Cameras, printers and other devices.WHAT THIS COVERSNetwork printers Security cameras Smart... Securing Data in Transit and at Rest Protecting information.WHAT TO USE FOR EVERY CONNECTIONEncryption, throughout, without... Securing Dependencies and the Supply Chain Risk from code you did not write.WHERE IT COMES FROMLibraries you install Their dependencies... Securing Device Communications Protecting data in transit.WHAT TO USEEncrypted transport, always.WHAT CONSTRAINED DEVICES MAY... Securing Device Identity Proving which device is which.WHAT IS REQUIREDA unique identity per device Credentials that... Securing Devices Used in Public Working away from your premises.WHAT TO BE AWARE OFPeople able to see your screen Devices left... Securing File Uploads Where attacks get in.THE RISKA form accepting files, exploited to upload something... Securing File Uploads on Your Website A form that lets visitors upload files is one of the most commonly exploited features on any... Securing Financial and Banking Access Money systems.WHAT TO PROTECTBanking Payment gateways Accounting systems Anywhere payment details... Securing Infrastructure Secrets Credentials at scale.WHAT THE PROBLEM ISSecrets needed by servers, pipelines and applications, in... Securing IoT Networks Protecting the surrounding environment.WHAT TO SEPARATEDevice networks from other... Securing Keys and Recovery Phrases Protecting what cannot be recovered.WHAT TO DO WITH A RECOVERY PHRASEWrite it on paper or stamp... Securing Mail on a VPS If your server sends or receives mail, it needs particular attention.THE RISKAn open relay, a... Securing Network Communication Protecting data in transit.WHAT TO USEEncrypted connections, without exception.WHAT TO... Securing Notification Handling Verifying inbound messages.WHAT THE RISK ISAn attacker sending a forged notification claiming... Securing Payment Interfaces Protecting the endpoints that move money.WHAT MAKES THEM DISTINCTIVEThey are directly valuable to... Securing Phones and Tablets Mobile devices.WHY THEY MATTERA phone holds your email, your authentication codes, and frequently... Securing PHP Applications Framework-level protections.WHAT FRAMEWORKS PROVIDE BY DEFAULTEscaping in templates Cross-site... Securing Social Media and Public Accounts Your public presence.WHY THEY MATTERA compromised business account is used to defraud your... Securing the Computer You Manage Your Site From Server-side security cannot protect you from malware on your own machine. If your laptop is... Securing the Deployment Pipeline Protecting the path to production.WHY IT MATTERSWhoever controls the pipeline controls... Securing the Device Itself Physical and local protection.WHAT TO DISABLE BEFORE SHIPPINGDebug and programming interfaces... Securing the Devices You Log In From The other half of access security.WHY IT MATTERSYour accounts are only as secure as the device... Securing Third-Party Integrations Connections to other systems.WHAT TO ESTABLISH FOR EACHWhat data is sent What is received How it... Securing Workspace Integrations Third-party access to organisational data.WHAT THE RISK ISApplications granted access to mail,... Securing Your Admin Area Protecting the control panel.WHAT TO DOA strong unique password Two-factor authentication Limit... Securing Your Business Network The connection everything depends on.WHAT TO SECUREYour router Your wireless network What... Securing Your Computer Practical steps.WHAT TO DOKeep it updated Use a screen lock with a short timeout Use a standard... Securing Your cPanel Account with Two-Factor Authentication Two-factor authentication adds a one-time code from your phone on top of your password. Anyone... Securing Your Database Practical protection.THE ESSENTIALSA strong generated password, different for every database user... Securing Your Hosting and Domain Accounts The accounts that control everything.WHY THEY MATTER MOSTControl of your hosting means control of... Securing Your Online Shop Against Fraud Shop-specific controls.WHAT TO ENABLEYour gateway's fraud screening Address verification, where... Securing Your Own Computer Where credentials are stolen.WHY IT MATTERSYour site is only as secure as the machine you... Securing Your Own Equipment in a Shared Facility Customer responsibilities.WHAT REMAINS YOURSYour equipment, its configuration, and its physical... Securing Your Social Accounts Protecting what you built.WHY IT MATTERSA compromised business account can be used to impersonate... Securing Your Web Applications on a VPS The server is only as secure as what runs on it.WHY THIS MATTERS MORE ON A VPSOn shared hosting,... Securing Your Website and Hosting Accounts The business presence.WHAT TO PROTECTYour hosting account Your domain registrar account Your site... Security and Access Control Protecting business data.WHAT TO ESTABLISHRoles matching actual job functions Permissions granted... Security at Events and in Public Settings Trade shows, meetings and public work.WHAT THE RISKS AREDevices lost or stolen Screens observed... Security Considerations Around Payments You Accept Taking money safely.WHAT TO USEA reputable payment gateway that handles card details for... Security Considerations for AI Tools A newer category of risk.WHAT TO UNDERSTANDInformation you put into a tool leaves your... Security Expectations for SaaS Providers What customers require of you.WHAT YOU ARE HOLDINGOther organisations' data, on their behalf.WHAT... Security for a One-Person Business When you are everyone.WHAT IS DIFFERENTNo colleague to verify with No separation of duties... Security for Businesses Handling Sensitive Records Higher-risk data.WHO THIS APPLIES TOAnyone holding health information, financial records,... Security for Businesses With Physical Premises Shops, offices and workshops.WHAT TO CONSIDERWho can reach equipment Who can reach the network... Security for Freelancers and Consultants Working across several clients.WHAT IS DIFFERENTYou hold access to other people's systems.That... Security for Non-Technical Staff Practical guidance for everyone.THE FEW THINGS THAT MATTERUse unique passwords, through a... Security for Online Shops Selling online.WHAT YOU HOLDCustomer names, addresses, contact details, order history.WHAT YOU... Security for Shared and Family Devices Devices used by more than one person.THE PRINCIPLEBusiness accounts do not belong on a device... Security for Shops Additional requirements.WHAT A SHOP HOLDSCustomer names, addresses and contact details Order... Security for Sites You Manage for Others Client site responsibility.WHAT TO ESTABLISHWho is responsible for updates Who holds the... Security Headers Alongside HTTPS HTTPS is the foundation; headers build on it.THE USEFUL ONESStrict-Transport-Security: forces... Security Headers and Browser Protections Instructing the browser.WHAT HEADERS PROVIDEInstructions to the browser about how to treat your... Security Obligations and Compliance What may be required of you.WHAT MAY APPLYData protection obligations, where you hold personal... Security of Static Sites Less to attack.WHY THEY ARE SAFERNo database No application processing input No plugins to become... Security Plugins and Firewalls What protection tools do.WHAT THEY OFFERBlocking malicious requests Limiting login attempts... Security Plugins and Tools Application-level protection.WHAT THEY TYPICALLY PROVIDELogin attempt limiting File integrity... Security Practices for Organisations Protecting institutional holdings.WHAT TO ESTABLISH FIRSTWho may authorise a transfer What limits... Security Responsibilities as a Reseller You sit between us and your clients, and you carry obligations in both directions.PROTECTING YOUR... Security Terms Explained Threats and defences.MALWARESoftware intended to cause harm.BACKDOORCode left behind allowing an... Security Testing Fundamentals Verifying defences.WHAT IT EXAMINESWhether the software can be made to behave in ways it should... Security When People Join and Leave The lifecycle.ON JOININGIndividual accounts with the minimum access needed A second... Security When Taking Over Someone Else's Systems Inheriting an environment.WHEN THIS HAPPENSYou acquire a business A developer or employee leaves... Security When Working From Home Home working arrangements.WHAT CHANGESYour home network becomes a business network Family devices... Security When Working With Contractors External people with access.WHAT TO ESTABLISHWhat they need access to For how long What they may... Security While Travelling Away from your usual environment.BEFORE YOU GOUpdate devices Back up everything Enable remote... Selling a SaaS Business Exiting.WHO BUYSCompetitors Larger companies entering the market Individuals and small groups... Selling Maintenance Plans The most valuable thing alongside hosting.WHAT IT INCLUDESCore, theme and plugin updates Backup... Selling SSL Certificates When free certificates are not enough.THE HONEST POSITIONAutoSSL provides free certificates that... Selling to Businesses Higher-value sales.WHAT DIFFERS FROM SELF-SERVICESeveral people involved A procurement process... Sending Backups to Cloud Storage Getting copies off the server automatically.THE OPTIONSGoogle Drive, Dropbox, OneDrive, or object... Server Maintenance Routine What to do regularly.WEEKLYCheck for and apply security updates Review monitoring alerts Check... Server Ports and Firewall Rules What is open on a server.WHAT IS TYPICALLY OPENWeb ports Mail ports Control panel ports Secure... Server-Side Session Handling Server-side session handling.WHAT A SESSION ISServer-held state, referenced by an identifier the... Servers and Provisioning: Everything That Matters, Briefly The summary.SECURE ACCESS BEFORE ANYTHING ELSEA new server is scanned within minutes of... Servers and VPS: Everything That Matters, Briefly The whole category in one page.BEFORE BUYING ONEName the specific thing you cannot do on shared... Serving International Customers From Here Selling abroad.WHAT IT PROVIDESRevenue in stronger currency A far larger market Prices that... Setting File and Folder Permissions in cPanel Permissions decide who can read, write and execute a file. Wrong values cause both 403 errors and... Setting Response Time Expectations What to promise.WHAT TO STATEYour hours Your target response time What counts as urgent What... Setting Safe File Permissions Permissions control who may read, write and execute each file. Loose permissions let one... Setting the Document Root Correctly Where a domain serves from.WHAT IT ISThe directory a domain serves files from.WHY IT MATTERSWrong... Setting the SSL Mode Correctly The setting that causes the most problems.THE MODESOff: no encryption. Never use this.Flexible:... Setting Up a New Computer Starting properly.WHAT TO DO IN ORDERApply all available updatesSet up accounts: a standard one... Setting Up Email in Samsung Email The app pre-installed on many Samsung phones.THE STEPSOpen Samsung Email and tap Other if... Setting Up Email on a Phone The most common setup.WHAT YOU NEEDYour email address Your mailbox password The server hostname... Setting Up Email on Android Android varies by manufacturer, but the fields are always the same.THE STEPSOpen Gmail or your... Setting Up Printers and Scanners Common peripherals.WHAT TO ESTABLISHWhether it connects by cable, wireless or network Whether... Setting Up Remote MySQL Access By default the database only accepts connections from the server itself. Remote MySQL allows a... Setting Up SPF, DKIM and DMARC These three DNS records let receiving mail servers verify that mail claiming to be from your... Setting Up SSH Key Authentication Replacing passwords with keys, which is both more secure and more convenient.WHYPasswords can be... Setting Up SSH Keys for Your Account More secure and more convenient than passwords.GENERATING A KEYIn cPanel > SSH Access >... Setting Up Two-Factor Authentication Practical steps.WHAT YOU NEEDAn authenticator app on your phone.HOW IT WORKSThe service shows a... Setting Up Your Domain Email in the Gmail App The Gmail app on Android and iPhone can handle your business address alongside a Gmail... Shared Hosting, Reseller Hosting and VPS Compared SHARED HOSTINGYour account sits on a server alongside other customers, each with allocated... Shared Versus Dedicated: A Straight Comparison What genuinely differs, and what does not.SHARED IPIncluded with your plan at no cost Fully... Sharing and Governing Power BI Content Distribution and control.WHAT WORKSPACES AREContainers for content, with defined access.WHAT TO... Should You Move to a VPS? The next step, honestly assessed.WHAT A VPS GIVES YOUFull control over the server Software you... Signs That Your Website Has Been Hacked Compromises are often quiet by design. These are the signals worth watching for.VISIBLE SIGNSYour... Signs You Should Change Theme When the foundation is wrong.THE SIGNSYou cannot achieve what you need without extensive... SNI and Why Shared IPs Work with SSL The technology that made dedicated IPs unnecessary for SSL.THE OLD PROBLEMA server presents its... Social Media Checklist What to verify.SETUPBusiness account, not personal Registered to a business email address... Spam Pages Appeared on My Site Injected content, usually from a compromise.WHAT IT LOOKS LIKEPages you did not create,... Spares and Consumables What to keep on site.WHAT TO CONSIDER KEEPINGSpare drives, matching those in use Power supplies,... Specialised Technology: Everything That Matters, Briefly The whole category in one page.MOST OF THESE FIELDS REWARD THE SAME DISCIPLINEMeasure before... SSL and Dedicated IP Addresses Addressing a persistent misconception.THE OLD POSITIONBefore SNI, a server could present only one... SSL and Security Requirements for a Shop A shop without HTTPS will lose customers and may be refused by payment gateways.ISSUING THE... SSL Checklist for a New Website Before a site goes live.THE CERTIFICATEDomain resolves to our server AutoSSL run, with a padlock... SSL Configuration Grades and What They Mean Online testing tools award a grade. Interpreting it sensibly.WHAT IS GRADEDSupported protocol... SSL Errors With Cloudflare Certificate problems in the path.THE TWO CERTIFICATESVisitor to Cloudflare, which Cloudflare... SSL for Email Clients Certificates matter for mail as well as the website.WHAT SECURES MAILConnections between your... SSL for Webmail and cPanel Access The control panel connections are secured too.WEBMAILReached at yourdomain.com/webmail once the... SSL_ERROR_NO_CYPHER_OVERLAP and Similar Browser and server share no acceptable encryption method.WHAT IT MEANSThe client offered a set of... Standards and Certifications Independent assessment.WHAT CERTIFICATIONS ADDRESSInformation security management Service... Standards and Interoperability Devices working together.WHY IT MATTERSCustomers resist devices that work only with one vendor's... Static Site Generators and Static Hosting Sites with no application at all.WHAT THEY ARETools that build plain HTML files from templates... Static Sites and Frameworks: Everything That Matters, Briefly The whole category in one page.WHAT STATIC MEANSThe server sends an existing file. Fast, secure,... Static, WordPress or Framework: Which Do You Need? Choosing honestly.CHOOSE STATIC WHENThe content changes rarely You do not need accounts or a... Storing Customer Data Securely Practical protection.THE MEASURESHTTPS across the whole site Strong unique passwords and... Storing Data in the Browser Client-side persistence.WHAT OPTIONS EXISTSimple key and value storage, persisting indefinitely... Storing Data Securely on Device Protecting local information.WHAT TO STORE IN SECURE STORAGEAuthentication tokens Credentials... Structured Prompts and Delimiters Organising a complex prompt.WHY STRUCTURE HELPSA long prompt containing instructions, context and... Subscriber Data and Privacy Handling the list responsibly.WHAT YOU HOLDEmail addresses, names, and whatever else you... Supported PHP Versions and Extensions We run multiple PHP versions side by side, selectable per domain.CHOOSING A VERSIONcPanel >... Supporting Apple Devices in an Organisation Practical administration.WHAT TO ESTABLISHWho owns the devices How they are enrolled and... Symptom: Cannot Access cPanel Control panel access problems.WHAT TO ESTABLISHDoes the login page load? Is the password... Symptom: Cannot Log In to the Site Administration access lost.WHAT TO ESTABLISHIs the password wrong, or is the page failing?FOR A... Symptom: Certificate Warning or Not Secure HTTPS problems.WHAT TO ESTABLISHWhat the browser says exactly.THE COMMON CAUSESNo certificate... Symptom: Files or Data Missing Something is gone.WHAT TO ESTABLISHWhat is missing, and when it was last seen Who has access What... Taking Over DNS for an Inherited Site A site you did not set up.WHAT TO ESTABLISH FIRSTWhere the domain is registered Which nameservers... Taking Over Someone Else's Project Inheriting code you did not write.BEFORE COMMITTINGLook at it first. Quote after you have seen... Technical Debt: Everything That Matters, Briefly The summary.ONLY DELIBERATE, RECORDED COMPROMISE IS ACTUALLY DEBTConflating it with everything... Technical SEO Audit Checklist What to check periodically.CRAWLING AND INDEXINGrobots.txt correct and not blocking anything... Test Environments and Data: Everything That Matters, Briefly The summary.NEVER COPY PRODUCTION DATA TO A TEST ENVIRONMENT WITHOUT ANONYMISINGTest environments... Testing Extensions and Third-Party Components Verifying what you did not write.WHAT THE RISKS AREBehaviour changing on update Conflicts between... Testing File Upload and Processing Verifying handling of user files.WHAT TO TEST ABOUT UPLOADAccepted types Rejected types Size... Testing Financial Systems for Vulnerabilities Security assessment.WHAT TO TEST FOR SPECIFICALLYAuthorisation on every money-related endpoint... Testing for Common Vulnerabilities Known weakness classes.WHAT INJECTION TESTING INVOLVESSupplying input intended to be interpreted... Testing From Requirements Deriving tests from what was asked for.WHAT TO EXTRACTEvery stated behaviour Every constraint... Testing in Continuous Delivery Verification in a pipeline.WHAT THE PIPELINE SHOULD DOBuild Run fast tests Run static analysis... The .well-known Path and Why It Must Stay Accessible The path AutoSSL uses to prove domain control.WHAT HAPPENSAutoSSL places a file under... The Keychain and Secure Storage Protecting credentials.WHAT THE KEYCHAIN ISAn encrypted store for passwords, tokens, keys and... The Nigerian Regulatory Position Local rules, and their history.WHAT HAS CHANGED OVER TIMEThe position has been revised more than... The Security Basics Everyone Needs The essential list.KEEP EVERYTHING UPDATEDCore software, plugins, themes.The single most... The Site Ahead Contains Malware A browser or search engine security warning.WHAT IT MEANSMalicious content was detected on your... The Trade-Offs of Going Static What you gain and lose.WHAT YOU GAINSpeed, substantially Security, since there is little to... The Trilemma and Its Trade-Offs Why every network compromises.WHAT THE THREE PROPERTIES AREDecentralisation Security... The True Cost of Running Your Own Server What it actually takes.THE MONEYThe server itself Backups, if not included Monitoring, if not... The WordPress Cloudflare Plugin Integrating the two.WHAT IT DOESRestores real visitor IP addresses, so your site does not see... Third-Party Risk in Payments Dependence on others.WHO YOU DEPEND ONPayment providers Switches and processors Banking partners... TLS Versions and Which Are Supported Not all versions of the protocol are safe.THE VERSIONSTLS 1.0 and 1.1: obsolete and disabled by... Tokenisation and Card Vaulting Storing payment credentials safely.WHAT A TOKEN ISA substitute value representing a payment... Tokenising Real-World Assets Representing physical things.WHAT IT MEANSIssuing a token representing ownership or a claim on... Tokens and Token Standards Assets issued on a network.WHAT A TOKEN ISAn asset defined by a program on a network, rather than... Too many failed login attempts An account is locked out.FOR CPANEL OR FTPRepeated failures block your IP address at the... Tracking and Fixing Errors Finding what breaks.WHAT ERROR TRACKING PROVIDESErrors collected, grouped and counted, with... Turning Off Directory Listings When a folder has no index file, the server may display a browsable list of everything inside it.... Types of Testing What is being examined.WHAT FUNCTIONAL TESTING EXAMINESWhether the software does what it... Uncertainty About the Future Holding views appropriately.WHAT IS GENUINELY UNCERTAINWhich networks persist Whether... Understanding and Applying Updates Keeping software current.WHY UPDATES MATTERThey fix security weaknesses, and those weaknesses are... Understanding Application Licences What you are agreeing to.OPEN SOURCEMost common platforms are open source and free to use, modify... Understanding Azure What the platform provides.WHAT IT ISA cloud platform providing infrastructure, platform and... Understanding Backdoors and Web Shells A backdoor is code left behind so an attacker can return without needing the original... Understanding Browser APIs Capabilities available to pages.WHAT THEY AREFunctionality the browser exposes to JavaScript.WHAT... Understanding Certificate Pinning An advanced technique with real risks.WHAT IT ISConfiguring a client to accept only a specific... Understanding Client and Server Roles Who asks and who answers.WHAT A CLIENT ISSoftware making a request.WHAT A SERVER ISSoftware... Understanding Cloud Services Software and storage elsewhere.WHAT IT MEANSUsing software and storage that runs on someone... Understanding Consensus Mechanisms Agreeing without a central authority.WHAT THE PROBLEM ISDistributed participants, some possibly... Understanding Data Centres: Everything That Matters, Briefly The summary.WHAT A DATA CENTRE PROVIDESContinuous power, controlled cooling, multiple network... Understanding DDoS Attacks A denial-of-service attack floods a site with traffic so that legitimate visitors cannot reach... Understanding Django The full framework.WHAT IT PROVIDESAn ORM Migrations An administrative interface, generated from... Understanding Edge Computing Processing close to where data is produced.WHAT IT MEANSPerforming computation near the source of... Understanding Encrypted Connections What the padlock means.WHAT ENCRYPTION IN TRANSIT DOESPrevents traffic being read between you and... Understanding File Permissions for Developers Getting them right so applications work and stay secure.THE STANDARD VALUESDirectories: 755Files:... Understanding Full-Stack Development Working across both sides.WHAT IT MEANSWorking on both the interface and the server side.WHAT IT... Understanding Gatsby and Static Site Generation Building sites as files.WHAT IT DOESProduces a static site at build time, from content in various... Understanding Java Spring Boot The dominant Java framework.WHAT IT PROVIDESDependency injection Auto-configuration based on what... Understanding Malicious Software What it does.WHAT IT ISSoftware intended to cause harm or gain unauthorised access.WHAT IT... Understanding PHP Versions Which version to run.WHY IT MATTERSEach version brings performance improvements, new features,... Understanding Power Apps Building applications without code.WHAT TYPES EXISTCanvas applications, where you design the... Understanding Protocols and Ports How services communicate.WHAT A PROTOCOL ISAn agreed set of rules for exchanging data.WHAT A PORT... Understanding Quantum Cryptography Quantum mechanics applied to secrecy.WHAT QUANTUM KEY DISTRIBUTION ISUsing quantum properties to... Understanding Resource Limits and 508 Errors A 508 Resource Limit Reached message means your account hit a plan limit at that moment, not that... Understanding Software Updates and Patching Keeping software current.WHAT UPDATES CONTAINSecurity fixes Defect corrections New features... Understanding Symfony Components and structure.WHAT IT ISA framework, and a set of independent components used widely... Understanding the Power Platform What the components do.WHAT THE COMPONENTS AREPower BI, for reporting and analysis Power Apps,... Understanding Uptime Uptime is the percentage of time a service is reachable. It is a useful measure, but it is... Understanding WebSockets and Real-Time Communication Persistent connections.WHAT THE PROBLEM ISOrdinary requests are initiated by the client. The... Understanding Windows Server The server operating system.WHAT IT PROVIDESA platform for running server roles and... Unusual activity or login from a new location A security notification.WHAT TO DO IMMEDIATELYIf it was not you, change the password for that... Updating Hardcoded HTTP Links in Content Old content keeps pointing at insecure URLs.WHERE THEY HIDEImage src attributes in posts and... Updating Plugins Keeping them current.WHY UPDATESecurity fixes, primarily.Outdated plugins are the most common... Updating Your Account Details Out-of-date contact details cause a large share of avoidable problems.WHEREAccount > Edit... Updating Your PHP Version Frequently the easiest gain available.WHY IT MATTERSNewer PHP versions are substantially faster... Upgrading Frameworks and Dependencies Keeping current.WHY IT MATTERSUnsupported versions receive no security fixes, and falling far... Using a Control Panel on a VPS Managing without the command line.WHAT A CONTROL PANEL GIVES YOUA web interface for sites, email,... Using a Password Manager The tool that makes this workable.WHAT IT DOESGenerates unique passwords Stores them encrypted... Using AI Assistance With Languages Practical and careful use.WHAT IT IS USEFUL FORExplaining unfamiliar syntax Translating a concept... Using AI Tools for Analysis Care and limits.WHAT THEY CAN HELP WITHExplaining a function or method Suggesting how to... Using Biometric Authentication Fingerprint and face recognition.WHAT IT ACTUALLY DOESConfirms the device's owner is present.WHAT... Using Cloudflare as a Security Layer Cloudflare sits in front of your site, filtering traffic before it reaches our servers. The free... Using Content-Security-Policy to Upgrade Requests A header that can mitigate mixed content.WHAT IT DOESAdding upgrade-insecure-requests to a... Using Deploy Keys for Private Repositories Letting the server pull from a private repository.WHY A DEPLOY KEYA deploy key grants read access... Using Firebase Securely The critical configuration.WHAT THE MOST COMMON SERIOUS MISTAKE ISSecurity rules left open.WHAT... Using Google Workspace APIs Programmatic access from outside.WHAT THE MAIN APIs AREDrive, for files Sheets, docs and slides,... Using HTTPS Correctly Across Your Site HTTPS encrypts traffic between your visitors and the server. Without it, passwords and form... Using Leech Protection on Password-Protected Areas Leech protection detects when one login is being shared widely, which typically means a member... Using Public Wi-Fi Safely Networks you do not control.WHAT THE RISK ISTraffic potentially observable Networks impersonating... Using Search Console for Technical Health The monitoring tool.WHAT IT REPORTSIndexing status per page Crawling errors Mobile usability... Using the cPanel Terminal A shell without configuring anything locally.FINDING ITcPanel > Terminal, under Advanced. If... Using the Knowledgebase Support > Knowledgebase holds articles on hosting, domains, email, security and... Using Video Responsibly What to be careful with.PERMISSIONAnyone identifiable in your video should have... Using ZillionKingHost AI for Coding Where it helps developers.WHERE IT GENUINELY HELPSExplaining unfamiliar code Writing boilerplate... USSD and Feature Phone Payments Transacting without the internet.WHAT USSD ISA session-based protocol on mobile networks, using... Verifying Mixed Content Is Fully Resolved Confirming the job is done.CHECK SEVERAL PAGE TYPESHomepage A blog post with images, ideally an... Vetting Software and Services Before You Adopt Them Choosing what to trust.WHAT TO ASSESSWhat data it will hold or access What permissions it... Virtual Machine Management Day-to-day operation.WHAT TO STANDARDISETemplates, from which machines are created Naming... VPS Security Fundamentals The basics, in priority order.THE ESSENTIALSSSH keys rather than passwords, with root login... VPS Terminology You Will Encounter A glossary for the terms that appear in documentation and support tickets.ROOTThe administrative... Wallet Security Practices Reducing exposure.WHAT TO SEPARATEHoldings held long term, in cold storage Small amounts for... Web Application Firewalls and Edge Security Filtering at the edge.WHAT A WEB APPLICATION FIREWALL DOESInspects requests and blocks those... Web Application Security Essentials Protecting what you build.VALIDATE EVERY INPUTAt the server, regardless of browser... Web Development: Everything That Matters, Briefly The summary.CHOOSE AN ESTABLISHED, WELL-DOCUMENTED FRAMEWORKAnswers exist when you are stuck.... Web Security: Everything That Matters, Briefly The summary.THE COMMONEST SERIOUS FAULT IN CUSTOM APPLICATIONSChecking authentication but not... Website Security: Everything That Matters, Briefly The whole category in one page.THE THING TO UNDERSTAND FIRSTAttacks are automated and... What a Customer Is Responsible For The division of duties.WHAT THE FACILITY PROVIDESPower, cooling, connectivity, physical security,... What a Data Centre Actually Is The building behind the cloud.WHAT IT ISA facility housing computing equipment, with the power,... What a Static Site Is Pages without a database.WHAT IT MEANSThe server sends a file that already exists, rather than... What a VPS Actually Is A virtual private server is a slice of a physical machine, allocated to you alone.HOW IT WORKSA... What Changes When You Move to a VPS The differences that surprise people.WHAT YOU GAINRoot access and the ability to install anything... What Cloudflare Actually Does The service explained plainly.THE BASIC IDEACloudflare sits between your visitors and our... What Cyber Security Actually Means for a Small Business Scope and proportion.WHAT IT COVERSProtecting your devices, accounts, data and people from... What FTP Is and When to Use It File transfer basics.WHAT IT DOESTransfers files between your computer and the server.WHEN TO USE... What Information Technology Covers The discipline.WHAT IT INCLUDESHardware: the physical equipmentSoftware: the programs running on... What Is Prompt Injection? Instructions hidden in content.THE DEFINITIONInstructions embedded in content the AI processes,... What Laravel Provides Why use a framework.WHAT IT GIVES YOURouting Request and response handling Database access and an... What Microsoft 365 Includes The service components.WHAT THE CORE SERVICES AREEmail and calendaring File storage, personal and... What Mixed Content Is A secure page loading insecure resources.WHAT HAPPENSThe page itself arrives over https, but... What PHP Is and Why Your Site Needs It The language behind most websites.WHAT IT DOESRuns on the server, generates the page, sends the... What Plugins Do and What They Cost Understanding the trade-off.WHAT THEY DOAdd functionality WordPress does not include: forms,... What Reseller Hosting Is and Who It Suits Reseller hosting gives you a WHM account from which you create and manage individual cPanel... What SSL and TLS Actually Are SSL and TLS are the protocols that encrypt traffic between a browser and a server.THE NAMESSSL... What the Padlock Does and Does Not Mean A widely misunderstood symbol.WHAT IT MEANSThe connection between your browser and that server is... What to Do If Your Account Has Been Suspended Read the suspension email first. It states the reason, and the right action depends entirely on... What to Do If Your Hosting Account Is Compromised Act in this order. Speed matters, because a compromised account is usually being used for... What to Do If Your WordPress Site Is Hacked Work through these steps in order. Do not skip step 1 — cleaning a site while it is still serving... What to Send a New Client The onboarding message.WHAT IT SHOULD CONTAINWelcome and confirmation of what they have bought... What Two-Factor Authentication Does Why it matters most.WHAT IT ISA second step beyond your password.Usually a code from an app,... What We Do and What You Must Do After a Compromise Cleaning up is a shared responsibility. Knowing the split avoids delays.WHAT WE... What We Handle and What You Handle The division of responsibility.WHAT WE HANDLEServer hardware and infrastructure Server-level... What You Are Responsible For as a Reseller Being clear about the boundary prevents difficult conversations later.WE HANDLEServer hardware,... What You Can Buy at ZillionKingHost The full range of products and services.HOSTINGShared Hosting, for most websites WordPress... When a Developer Disappears The common crisis.WHAT HAPPENSCommunication stops Work is unfinished, or the site needs attention... When a Plugin Is Consuming Resources Finding the culprit.WHAT TENDS TO BE HEAVYSecurity plugins scanning constantly Related-post... When an Application Is No Longer Maintained The project has been abandoned.HOW TO TELLNo release in a year or more The project site is... When Emails Appear to Come From Your Domain but Did Not Receiving a bounce or a complaint about mail you never sent does not necessarily mean your... When to Move Back to Shared Hosting A legitimate decision.THE SIGNSYou are not maintaining the server You dread touching it The... When to Move DNS Away From Your Host Considering an external provider.REASONS TOFaster propagation, at some providers Keeping DNS... When to Move from Shared Hosting to a VPS Shared hosting suits most websites. These are the signs it no longer suits yours.GENUINE... When to Redesign Your Website And when not to.GOOD REASONSThe site does not work on phones It is genuinely slow and cannot be... When to Use an Application Versus Custom Code Build or install.USE AN EXISTING APPLICATION WHENThe requirement is common: a blog, a shop, a... When Two-Factor Is Not Enough Its limits.WHAT IT DOES NOT STOPA compromised device, where the attacker has the codes too An... Why Businesses Use Data Centres The alternative to a server in the office.WHAT A SERVER IN AN OFFICE FACESPower interruptions... Why Hacked Sites Get Reinfected A site cleaned but not hardened is usually compromised again within days. There are four usual... Why Hosting Accounts Get Suspended Suspension is not arbitrary. These are the reasons, roughly in order of how often they... Why IoT Security Is Different The distinctive risks.WHAT MAKES IT HARDERDevices are physically accessible They are numerous and... Why Password Reuse Is the Biggest Risk The most common failure.WHAT HAPPENSA service you used is breached.Your email address and... Why Updates Matter Most The single most important measure.WHAT AN UPDATE FREQUENTLY CONTAINSA fix for a known... Why We Ask for Verification Before Making Account Changes When you ask us to reset a password, change the registered email, unlock a domain or transfer... Why You Cannot Reach Your Own Site (Firewall Blocks) If your site loads for everyone else but not for you, your IP address has almost certainly been... Why You Should Never Use Nulled Themes and Plugins "Nulled", "cracked" or "GPL-free" copies of premium plugins are widely advertised as a way to... Why You Should Use a Current PHP Version Two reasons that matter.SPEEDNewer versions execute substantially faster.The difference on a busy... Wireless Network Security Wi-Fi specifically.WHAT TO SETA strong unique wireless password Current encryption A network name... WordPress Plugins: Everything That Matters, Briefly The whole category in one page.THE CORE PRINCIPLEEvery plugin must earn its place.Each adds code,... WordPress Security Hardening Checklist Work through this list on every site you host with us. Most compromises we see come from skipping... Working as a Backend Developer: Everything That Matters, Briefly The summary.IN AN UNFAMILIAR CODEBASE, START WITH THE ROUTING DEFINITIONSThey are the map of what... Working as a Developer: Everything That Matters, Briefly The summary.SET UP THE IGNORE FILE BEFORE THE FIRST COMMITOnce a secret is committed it remains... Working From Home or Small Premises Where to operate.WORKING FROM HOMELowest cost No commute Practical for many servicesWHAT TO... Working in the Blockchain Sector Careers and practice.WHAT ROLES EXISTContract development Protocol and infrastructure engineering... Working Safely in a Data Hall Personal safety and care.WHAT THE ENVIRONMENT IS LIKELoud, cold in places and hot in others, with... Working With Databases Persistent structured storage.WHEN TO USE ONEData that outlives the program Data several... Working with Environment Variables and Paths Why a command works for you and not in a script.THE PROBLEMYour interactive shell loads a profile... Working With Location and Device Capabilities Hardware access from a page.WHAT CAN BE ACCESSEDApproximate or precise location Camera and... Working With Removable Storage External drives and memory devices.WHAT THEY SUITBackups Archives Transferring large files where... Working With Spring Boot Effectively Practical use.WHAT TO LEARN FIRSTDependency injection and component scanning Controllers and... Writing a Practical Security Policy Rules people will follow.WHAT TO COVERPasswords and the second step Device requirements What may... Writing Code With ZillionKingHost AI Generating working code.HOW TO ASK"Write [what] in [language]. Requirements: [list]. Include... Writing Secure Database Queries Preventing the most damaging class of vulnerability.SQL INJECTIONNever build a query by... Writing Technical Content With AI Explaining technical subjects.WHERE IT HELPSExplaining a concept at a specified level Producing... Your First Hour With a New VPS Do these before anything else.THE ORDERLog in and change the root password to something long and... Your First Week: A Security Starting Plan Where to begin.DAY ONEChange the password on your email to a unique generated one Enable the... Your IP has been blocked The firewall refused your connection.WHY IT HAPPENSSeveral failed cPanel, FTP, webmail or email...