Whats steps do you take to keep your forum secure?

[ChrisG2010]

What steps do you take in order to ensure the adequate protection is in order for your forum?

 

[s3_gunzel]

1) 2 ports are open. :80 and :443.
2) We have no proper admin panel, it's all certificate based oVPN connections to servers that aren't exposed to the internet.

 

[JewishPoptart89]

I uh... I don't do anything. Maybe an SSL cert but nothing more! :smiley: Maybe that's why I haven't had a website for a couple months.

Excited to see what everyone else does so I can steal the ideas.

 

[Bizarrio]

I don't currently own any forum, although I have owned a few forums in the past (some on my own and some in partnerships).

I didn't do anything special about forum security. All I did was keep regular backups and had strong password.

 

[xXInfectedXx]

I make users verity there email upon registration and members have to go through security checks before registering. I also used SSL, to make sure I had a green encryption on my forum. Finally, I made sure my password was strong on my Administrator account.

 

[Carlos]

- Turn on HTTPS.
- Keep your server updated constantly.
- Keep your blog or forums, and its plugins updated.
- Make sure your forum has spam mitigation implemented with some sort of CAPTCHA installed.
- Have strong password. Change your password every year or 6 months.
- Get backups.
- Constantly check accounts for suspicion of spam, or malicious intent.
- If you get a threat of DDoS attack, report it to your host, report it to the e-mail provider, and report it to police once it actually happens.

 

[s3_gunzel]

report it to police once it actually happens.

Do not do this. Police aren’t in a position to do anything.

 

[ChrisG2010]

- Turn on HTTPS.
- If you get a threat of DDoS attack, report it to police once it actually happens.

Not much the police are going to do anything about this. Working with your host is the best way to get around this. Also by having CloudFlare, you are putting a barrier that will assist some in the DDoS