How to protect 1C:Enterprise: access, backups and updates
Accounting, payroll, warehouse — for many companies everything lives in 1C. Here is how to keep that database safe and available.
Read articleFor many companies the website is the first contact with clients. When it is hacked, visitors may see spam, be redirected to fraud sites or download malware, and search engines may mark the site as dangerous. Most hacks of small business websites are caused by outdated software and weak passwords.
Typical causes
- Outdated CMS (such as WordPress), themes and plugins.
- Plugins downloaded from unofficial sources or abandoned by their developers.
- Weak administrator passwords and shared logins.
- Cheap hosting where many sites share the same server without isolation.
Checklist
- Update the CMS, themes and plugins regularly; remove everything you do not use.
- Use MFA for administrators and give editors only the rights they need.
- Use a supported PHP version on the server.
- Configure HTTPS and security headers.
- Put a web application firewall (WAF) in front of the site and limit login attempts.
- Make automatic backups of files and the database, stored outside the hosting account.
- Monitor the site for changes and availability.
A website is never finished — it needs maintenance like any other system.
Need help with this? Contact CySec for a free consultation.