[26-Feb-2026 00:31:13 America/Chicago] PHP Warning: Use of undefined constant ABSPATH - assumed 'ABSPATH' (this will throw an Error in a future version of PHP) in /home/touchmob/crazyleafdesign.com/blog/wp-content/plugins/thrive-visual-editor/thrive-dashboard/inc/app-notification/classes/DbMigration.php on line 2 [26-Feb-2026 00:31:13 America/Chicago] PHP Warning: require_once(ABSPATHwp-admin/includes/upgrade.php): failed to open stream: No such file or directory in /home/touchmob/crazyleafdesign.com/blog/wp-content/plugins/thrive-visual-editor/thrive-dashboard/inc/app-notification/classes/DbMigration.php on line 2 [26-Feb-2026 00:31:13 America/Chicago] PHP Fatal error: require_once(): Failed opening required 'ABSPATHwp-admin/includes/upgrade.php' (include_path='.:/opt/cpanel/ea-php74/root/usr/share/pear') in /home/touchmob/crazyleafdesign.com/blog/wp-content/plugins/thrive-visual-editor/thrive-dashboard/inc/app-notification/classes/DbMigration.php on line 2 [01-Mar-2026 07:45:51 America/Chicago] PHP Warning: Use of undefined constant ABSPATH - assumed 'ABSPATH' (this will throw an Error in a future version of PHP) in /home/touchmob/crazyleafdesign.com/blog/wp-content/plugins/thrive-visual-editor/thrive-dashboard/inc/app-notification/classes/DbMigration.php on line 2 [01-Mar-2026 07:45:51 America/Chicago] PHP Warning: require_once(ABSPATHwp-admin/includes/upgrade.php): failed to open stream: No such file or directory in /home/touchmob/crazyleafdesign.com/blog/wp-content/plugins/thrive-visual-editor/thrive-dashboard/inc/app-notification/classes/DbMigration.php on line 2 [01-Mar-2026 07:45:51 America/Chicago] PHP Fatal error: require_once(): Failed opening required 'ABSPATHwp-admin/includes/upgrade.php' (include_path='.:/opt/cpanel/ea-php74/root/usr/share/pear') in /home/touchmob/crazyleafdesign.com/blog/wp-content/plugins/thrive-visual-editor/thrive-dashboard/inc/app-notification/classes/DbMigration.php on line 2 [01-Mar-2026 18:48:26 America/Chicago] PHP Warning: Use of undefined constant ABSPATH - assumed 'ABSPATH' (this will throw an Error in a future version of PHP) in /home/touchmob/crazyleafdesign.com/blog/wp-content/plugins/thrive-visual-editor/thrive-dashboard/inc/app-notification/classes/DbMigration.php on line 2 [01-Mar-2026 18:48:26 America/Chicago] PHP Warning: require_once(ABSPATHwp-admin/includes/upgrade.php): failed to open stream: No such file or directory in /home/touchmob/crazyleafdesign.com/blog/wp-content/plugins/thrive-visual-editor/thrive-dashboard/inc/app-notification/classes/DbMigration.php on line 2 [01-Mar-2026 18:48:26 America/Chicago] PHP Fatal error: require_once(): Failed opening required 'ABSPATHwp-admin/includes/upgrade.php' (include_path='.:/opt/cpanel/ea-php74/root/usr/share/pear') in /home/touchmob/crazyleafdesign.com/blog/wp-content/plugins/thrive-visual-editor/thrive-dashboard/inc/app-notification/classes/DbMigration.php on line 2 [06-Mar-2026 13:14:53 America/Chicago] PHP Warning: Use of undefined constant ABSPATH - assumed 'ABSPATH' (this will throw an Error in a future version of PHP) in /home/touchmob/crazyleafdesign.com/blog/wp-content/plugins/thrive-visual-editor/thrive-dashboard/inc/app-notification/classes/DbMigration.php on line 2 [06-Mar-2026 13:14:53 America/Chicago] PHP Warning: require_once(ABSPATHwp-admin/includes/upgrade.php): failed to open stream: No such file or directory in /home/touchmob/crazyleafdesign.com/blog/wp-content/plugins/thrive-visual-editor/thrive-dashboard/inc/app-notification/classes/DbMigration.php on line 2 [06-Mar-2026 13:14:53 America/Chicago] PHP Fatal error: require_once(): Failed opening required 'ABSPATHwp-admin/includes/upgrade.php' (include_path='.:/opt/cpanel/ea-php74/root/usr/share/pear') in /home/touchmob/crazyleafdesign.com/blog/wp-content/plugins/thrive-visual-editor/thrive-dashboard/inc/app-notification/classes/DbMigration.php on line 2 [08-Mar-2026 11:47:41 America/Chicago] PHP Warning: Use of undefined constant ABSPATH - assumed 'ABSPATH' (this will throw an Error in a future version of PHP) in /home/touchmob/crazyleafdesign.com/blog/wp-content/plugins/thrive-visual-editor/thrive-dashboard/inc/app-notification/classes/DbMigration.php on line 2 [08-Mar-2026 11:47:41 America/Chicago] PHP Warning: require_once(ABSPATHwp-admin/includes/upgrade.php): failed to open stream: No such file or directory in /home/touchmob/crazyleafdesign.com/blog/wp-content/plugins/thrive-visual-editor/thrive-dashboard/inc/app-notification/classes/DbMigration.php on line 2 [08-Mar-2026 11:47:41 America/Chicago] PHP Fatal error: require_once(): Failed opening required 'ABSPATHwp-admin/includes/upgrade.php' (include_path='.:/opt/cpanel/ea-php74/root/usr/share/pear') in /home/touchmob/crazyleafdesign.com/blog/wp-content/plugins/thrive-visual-editor/thrive-dashboard/inc/app-notification/classes/DbMigration.php on line 2 [20-Mar-2026 17:37:48 America/Chicago] PHP Warning: Use of undefined constant ABSPATH - assumed 'ABSPATH' (this will throw an Error in a future version of PHP) in /home/touchmob/crazyleafdesign.com/blog/wp-content/plugins/thrive-visual-editor/thrive-dashboard/inc/app-notification/classes/DbMigration.php on line 2 [20-Mar-2026 17:37:48 America/Chicago] PHP Warning: require_once(ABSPATHwp-admin/includes/upgrade.php): failed to open stream: No such file or directory in /home/touchmob/crazyleafdesign.com/blog/wp-content/plugins/thrive-visual-editor/thrive-dashboard/inc/app-notification/classes/DbMigration.php on line 2 [20-Mar-2026 17:37:48 America/Chicago] PHP Fatal error: require_once(): Failed opening required 'ABSPATHwp-admin/includes/upgrade.php' (include_path='.:/opt/cpanel/ea-php74/root/usr/share/pear') in /home/touchmob/crazyleafdesign.com/blog/wp-content/plugins/thrive-visual-editor/thrive-dashboard/inc/app-notification/classes/DbMigration.php on line 2 [20-Mar-2026 17:37:53 America/Chicago] PHP Warning: Use of undefined constant ABSPATH - assumed 'ABSPATH' (this will throw an Error in a future version of PHP) in /home/touchmob/crazyleafdesign.com/blog/wp-content/plugins/thrive-visual-editor/thrive-dashboard/inc/app-notification/classes/DbMigration.php on line 2 [20-Mar-2026 17:37:53 America/Chicago] PHP Warning: require_once(ABSPATHwp-admin/includes/upgrade.php): failed to open stream: No such file or directory in /home/touchmob/crazyleafdesign.com/blog/wp-content/plugins/thrive-visual-editor/thrive-dashboard/inc/app-notification/classes/DbMigration.php on line 2 [20-Mar-2026 17:37:53 America/Chicago] PHP Fatal error: require_once(): Failed opening required 'ABSPATHwp-admin/includes/upgrade.php' (include_path='.:/opt/cpanel/ea-php74/root/usr/share/pear') in /home/touchmob/crazyleafdesign.com/blog/wp-content/plugins/thrive-visual-editor/thrive-dashboard/inc/app-notification/classes/DbMigration.php on line 2 [27-Mar-2026 14:07:52 America/Chicago] PHP Warning: Use of undefined constant ABSPATH - assumed 'ABSPATH' (this will throw an Error in a future version of PHP) in /home/touchmob/crazyleafdesign.com/blog/wp-content/plugins/thrive-visual-editor/thrive-dashboard/inc/app-notification/classes/DbMigration.php on line 2 [27-Mar-2026 14:07:52 America/Chicago] PHP Warning: require_once(ABSPATHwp-admin/includes/upgrade.php): failed to open stream: No such file or directory in /home/touchmob/crazyleafdesign.com/blog/wp-content/plugins/thrive-visual-editor/thrive-dashboard/inc/app-notification/classes/DbMigration.php on line 2 [27-Mar-2026 14:07:52 America/Chicago] PHP Fatal error: require_once(): Failed opening required 'ABSPATHwp-admin/includes/upgrade.php' (include_path='.:/opt/cpanel/ea-php74/root/usr/share/pear') in /home/touchmob/crazyleafdesign.com/blog/wp-content/plugins/thrive-visual-editor/thrive-dashboard/inc/app-notification/classes/DbMigration.php on line 2 [29-Mar-2026 10:21:48 America/Chicago] PHP Warning: Use of undefined constant ABSPATH - assumed 'ABSPATH' (this will throw an Error in a future version of PHP) in /home/touchmob/crazyleafdesign.com/blog/wp-content/plugins/thrive-visual-editor/thrive-dashboard/inc/app-notification/classes/DbMigration.php on line 2 [29-Mar-2026 10:21:48 America/Chicago] PHP Warning: require_once(ABSPATHwp-admin/includes/upgrade.php): failed to open stream: No such file or directory in /home/touchmob/crazyleafdesign.com/blog/wp-content/plugins/thrive-visual-editor/thrive-dashboard/inc/app-notification/classes/DbMigration.php on line 2 [29-Mar-2026 10:21:48 America/Chicago] PHP Fatal error: require_once(): Failed opening required 'ABSPATHwp-admin/includes/upgrade.php' (include_path='.:/opt/cpanel/ea-php74/root/usr/share/pear') in /home/touchmob/crazyleafdesign.com/blog/wp-content/plugins/thrive-visual-editor/thrive-dashboard/inc/app-notification/classes/DbMigration.php on line 2 {"id":27194,"date":"2018-08-03T19:18:44","date_gmt":"2018-08-03T11:18:44","guid":{"rendered":"https:\/\/www.crazyleafdesign.com\/blog\/?p=27194"},"modified":"2018-08-03T19:19:26","modified_gmt":"2018-08-03T11:19:26","slug":"how-to-make-a-website-secure","status":"publish","type":"post","link":"https:\/\/www.crazyleafdesign.com\/blog\/how-to-make-a-website-secure\/","title":{"rendered":"Halt the Hackers: How to Make a Website Secure"},"content":{"rendered":"
You might think hackers aren’t interested in your site, but you’d be wrong. Last year, hackers infected <\/span>83% of all WordPress sites<\/span><\/a>. They’ll hack anything and everything.<\/span><\/p>\n Why? They go after smaller sites so they can use the servers. They’ll use them to send spam email, launch attacks on other sites, or even mine Bitcoins.<\/span><\/p>\n They also know that small websites are easier to hack. But it doesn’t have to be that way. By taking a few simple measures, you can secure your website against hackers.<\/span><\/p>\n In this article, we’ll teach you the basics of how to make a website secure.<\/span><\/p>\n HTTP stands for hypertext transfer protocol. Think of it as the language of the world wide web. When you visit a website, your browser connects to that website’s server using HTTP.<\/span><\/p>\n But HTTP by itself isn’t secure. Someone could intercept the signal and steal your info. Or they could talk to your target server and pretend to be you.<\/span><\/p>\n HTTPS, or secure hypertext transfer language, solves these issues. With an HTTPS connection, all of the messages are encrypted. There’s no way for a hacker to insert themselves in between the browser and the server.<\/span><\/p>\n And HTTPS is about more than security. <\/span>Google now marks<\/span><\/a> all non-HTTPS sites as “non-secure” and punishes them in their rankings. So, if you want to attract new visitors, switch to HTTPS. <\/span><\/p>\n This is another easy measure you can take to make your website more secure.<\/span><\/p>\n Hackers are always looking for weaknesses in software platforms. And developers are always working to update their software to fix the weaknesses hackers find.<\/span><\/p>\n Having out-of-date software on your website is like having an old, creeky back door. With a little bit of effort, a hacker will probably be able to break in.<\/span><\/p>\n So, update your software whenever you get the chance. And that goes for all your software. Pay attention to small things like WordPress plugins and <\/span>web apps<\/span><\/a> as well. <\/span><\/p>\n Does your site let users upload profile photos? This seemingly harmless feature can spell big trouble if you’re not careful.<\/span><\/p>\n Hackers can use file uploads to put malicious files on your server. You can still allow users to upload photos, but there are few things you should do to make it a safe process. <\/span><\/p>\n By default, your web server won’t execute image files. But a hacker could upload an executable file and trick the server into executing it. For example, they could upload something called virus.jpg.exe and it would look like a jpeg file, but the server would see the .exe and execute it.<\/span><\/p>\n One way to defend against this is to simply rename every uploaded file. If you force every file to be in image format, the server won’t execute them.<\/span><\/p>\n To be extra safe, keep all uploaded files in a file separate from your webroot. By keeping everything partitioned, you’ll prevent any potential malware from damaging your site.<\/span><\/p>\n SQL injection attacks are old-school and they won’t work on most newer sites. But when they do work they can be devastating.<\/span><\/p>\n What is a SQL injection attack?<\/span><\/p>\n A SQL injection originates in a user input field. In many cases, the back end of your website will create SQL commands using information from user input fields. SQL commands manipulate a database by either adding information, changing information, or retrieving information.<\/span><\/p>\n So, if the hacker guesses what the SQL command looks like, they can alter it by entering SQL syntax into the input field. And if they enter the right SQL syntax, they can access and manipulate your database.<\/span><\/p>\n It’s an advanced concept, but it’s important that <\/span>you understand it<\/span><\/a> if you want to keep your data safe.<\/span><\/p>\n XSS injections are similar to SQL injections, but instead of SQL, XSS injection attacks use javascript.<\/span><\/p>\n The attack usually originates in a user comment. A hacker will add a comment to your site which contains malicious javascript. The javascript will then run on your users’ browsers, possibly compromising their security.<\/span><\/p>\n Much like SQL injections, XSS injections are an advanced concept, especially if you’re new to coding. Mozilla has put together <\/span>a good guide<\/span><\/a> on how to deal with XSS that will help you get started. <\/span><\/p>\n You’ve probably signed up for websites that have a list of annoying password requirements. It may be frustrating, but it serves an important purpose. If hackers access your users’ accounts, you’re responsible.<\/span><\/p>\n First, make sure they choose secure passwords. That means long passwords with a variety of character types.<\/span><\/p>\n Then, hash them before you store them in your database. You won’t actually know what your users’ passwords are. (That’s why when you forget your password to a website, you always have to make a new one.) <\/span><\/p>\n If you have no idea where to start, make a managed IT services checklist. This will show you areas where you may be vulnerable. And it will help you determine if you need professional help. <\/span>Read more here<\/span><\/a>.<\/span><\/p>\n Those are the basics to website security. Now that you know how to make a website secure, it’s time to apply your knowledge.<\/span><\/p>\n You’ll need to be diligent if you want to stay ahead of attackers. But it’s worth it if you want your business or blog to survive.<\/span><\/p>\n If you found this article helpful, head to <\/span>our web design blog<\/span><\/a> for more info about how to improve your website.<\/span><\/p>\n","protected":false},"excerpt":{"rendered":" The Internet is the information superhighway, sure, and there are a lot of people that break the road rules on it. To protect your site from hackers, click here to learn how to make a website secure. More<\/a><\/p>\n","protected":false},"author":1,"featured_media":27195,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[59],"tags":[],"adace-sponsor":[],"class_list":{"0":"post-27194","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-web-design"},"acf":[],"yoast_head":"\nMake Sure Your Site Uses HTTPS<\/b><\/h2>\n
Update Your Software<\/b><\/h2>\n
Be Careful With Uploaded Files<\/b><\/h2>\n
Defend Against SQL Injection Attacks<\/b><\/h2>\n
Defend Against XSS Injections<\/b><\/h2>\n
Password Security<\/b><\/h2>\n
Perform a Managed IT Services Checklist<\/b><\/h2>\n
How to Make a Website Secure <\/b><\/h2>\n