{"id":5315,"date":"2012-04-17T11:48:01","date_gmt":"2012-04-17T11:48:01","guid":{"rendered":"https:\/\/www.heartinternet.uk\/blog\/?p=5315"},"modified":"2012-04-17T11:48:01","modified_gmt":"2012-04-17T11:48:01","slug":"10-must-read-tips-for-optimal-website-security","status":"publish","type":"post","link":"https:\/\/www.heartinternet.uk\/blog\/10-must-read-tips-for-optimal-website-security\/","title":{"rendered":"9 must read tips for optimal website security"},"content":{"rendered":"

Having your website hacked is a sickening experience, particularly when it threatens your reputation and loses you business. As well as affecting your own files, compromised sites can pass on malware and viruses, spread spam and infect other people’s websites, so it’s imperative that you keep your websites as secure as possible. Here are ten tips to help you on your way to fighting attacks.<\/p>\n

1. Avoid installing plugins, add-ons and themes from third party websites<\/h4>\n

Go directly to the original author\u2019s website or an official source (such as the WordPress Plugin Directory) to download themes, add-ons and other extras for your website. Many third party sites \u2013 even some that rank highly in Google and other search engines – have manipulated the code of other people\u2019s themes and plugins to include vulnerabilities. Once you\u2019ve installed them on your website, hackers can then exploit them at their leisure.<\/p>\n

Don\u2019t assume that a resource is safe just because you\u2019ve seen someone else using it. Even if you\u2019ve downloaded it from the same source, theirs may just not have been targeted yet.<\/p>\n

2. Keep up to date with the latest vulnerabilities<\/h4>\n

Keeping an eye on tech news sites helps, as well as following key news blogs relating to specific software (for example WordPress). Many open source scripts will have updates on their own websites or admin dashboards to keep you in the loop.<\/p>\n

A good background knowledge gives you an idea of what to check for and what to avoid. For example, the vulnerable timthumb.php continues to be a target for hackers, yet many WordPress users don’t even know they have it installed (for image manipulation) within plugins or themes they have activated.<\/p>\n

Even if patched, scripts that are known to be vulnerable are best avoided as the attention often means they become even more of a target.<\/p>\n

\"\"<\/a><\/p>\n

3. Register for new releases<\/h4>\n

WordPress handily tells you when plugins, themes and the install itself are due for updates via the admin panel, but not all software does. Investigate how all the software you have installed tell you about upgrades and bugs; for example, for Zen Cart you can subscribe to a thread on their support forums.<\/p>\n

4. Keep your software up to date\u2026<\/h4>\n

One of the easiest and most common ways hackers can get access to your website is through an outdated script. Keeping everything up to date is an essential part of running a website. Many people have websites they lost interest in months or even years ago, but the old scripts and data remain there, posing a potential threat.<\/p>\n

5. \u2026but don\u2019t rush to be an early user<\/h4>\n

Brand new releases often have bugs and flaws that need patching. Before upgrading to a completely new release, have a search to see if any security issues have been found yet. If older versions are still fully patched and supported, it’s worth waiting until the security\/bug release has been made live.<\/p>\n

Avoid installing beta versions where possible, and avoid upgrading to new beta versions of software from your existing website. Test beforehand on a fresh website, and remember to delete everything once you\u2019ve finished and store it locally if necessary.<\/p>\n

\"\"<\/a><\/p>\n

6. Make a list<\/h4>\n

Make a complete list of what you’ve got installed and the version for each of your websites (depending on the number of websites and scripts you have, it may be easier to list the URLs under version headings). If you\u2019re working as part of a team, keep it as a central spreadsheet in Dropbox or Google Docs so everyone can access it. It’s worth setting reminders in your calendar to check for updates or to prompt upgrades.<\/p>\n

7. Don\u2019t advertise<\/h4>\n

Remember the TV advert showing people leaving their valuables in plain sight and within easy reach of burglars? There’s an online equivalent.<\/p>\n

Avoid public mentions of what plugins you\u2019ve got installed and which versions of software you\u2019re running, both on social media and on your websites. Where possible, check plugins and add-ons to make sure they aren\u2019t including a footprint of information about themselves on your site.<\/p>\n

8. Keep backups<\/h4>\n

Always keep multiple backups of your websites’ files and folders, and update them regularly. If your website is exploited you can then upload a clean copy of files and folders without the hassle of cleaning your site yourself. Keep copies of your backups in multiple locations, for example on an external hard drive, on your computer’s hard drive and via online storage facilities such as Dropbox.<\/p>\n

As a Heart Internet web hosting<\/a> customer you can download a backup of your site from eXtend. If you have a VPS<\/a> or dedicated server<\/a> with us, you can take advantage of our backup service directly from your control panel. Resellers<\/a> can also back up their customers’ websites or allow them to make their own backups by activating the feature in eXtend.<\/p>\n

\"\"<\/a><\/p>\n

Heart Internet resellers can back up their customers’ sites from the RCC.<\/i><\/p>\n

9. Install trusted security plugins\/add-ons<\/h4>\n

These work in a variety of different ways, including helping you block bad queries, assess how secure your website is, check for specific vulnerabilities and much more. As in our first tip, make sure you download plugins from an official source, and make sure you adjust any required settings before using.<\/p>\n

What are your best security tips? Let us know in the comments!<\/p>\n

 <\/p>\n","protected":false},"excerpt":{"rendered":"

Having your website hacked is a sickening experience, particularly when it threatens your reputation and loses you business. As well as affecting your own files, compromised sites can pass on…<\/p>\n","protected":false},"author":2,"featured_media":8208,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[28,29],"tags":[],"class_list":{"0":"post-5315","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-your-business","8":"category-your-website"},"yoast_head":"\n9 must read tips for optimal website security - Heart Internet<\/title>\n<meta name=\"description\" content=\"9 must read tips for optimal website security - Written by the team at Heart Internet.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.heartinternet.uk\/blog\/10-must-read-tips-for-optimal-website-security\/\" \/>\n<meta property=\"og:locale\" content=\"en_GB\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"9 must read tips for optimal website security - Heart Internet\" \/>\n<meta property=\"og:description\" content=\"9 must read tips for optimal website security - Written by the team at Heart Internet.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.heartinternet.uk\/blog\/10-must-read-tips-for-optimal-website-security\/\" \/>\n<meta property=\"og:site_name\" content=\"Heart Internet\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/heartinternet\/\" \/>\n<meta property=\"article:published_time\" content=\"2012-04-17T11:48:01+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.heartinternet.uk\/blog\/wp-content\/uploads\/2015\/06\/category_your_business1.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1620\" \/>\n\t<meta property=\"og:image:height\" content=\"720\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Eliot Chambers-Ostler\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@heartinternet\" \/>\n<meta name=\"twitter:site\" content=\"@heartinternet\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Eliot Chambers-Ostler\" \/>\n\t<meta name=\"twitter:label2\" content=\"Estimated reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.heartinternet.uk\/blog\/10-must-read-tips-for-optimal-website-security\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.heartinternet.uk\/blog\/10-must-read-tips-for-optimal-website-security\/\"},\"author\":{\"name\":\"Eliot Chambers-Ostler\",\"@id\":\"https:\/\/heartblog.victory.digital\/#\/schema\/person\/58ed7f27cc0f3ab6e69135742a5eee28\"},\"headline\":\"9 must read tips for optimal website security\",\"datePublished\":\"2012-04-17T11:48:01+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.heartinternet.uk\/blog\/10-must-read-tips-for-optimal-website-security\/\"},\"wordCount\":912,\"commentCount\":4,\"publisher\":{\"@id\":\"https:\/\/heartblog.victory.digital\/#organization\"},\"image\":{\"@id\":\"https:\/\/www.heartinternet.uk\/blog\/10-must-read-tips-for-optimal-website-security\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.heartinternet.uk\/blog\/wp-content\/uploads\/2015\/06\/category_your_business1.jpg\",\"articleSection\":[\"Your Business\",\"Your Website\"],\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/www.heartinternet.uk\/blog\/10-must-read-tips-for-optimal-website-security\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.heartinternet.uk\/blog\/10-must-read-tips-for-optimal-website-security\/\",\"url\":\"https:\/\/www.heartinternet.uk\/blog\/10-must-read-tips-for-optimal-website-security\/\",\"name\":\"9 must read tips for optimal website security - Heart Internet\",\"isPartOf\":{\"@id\":\"https:\/\/heartblog.victory.digital\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.heartinternet.uk\/blog\/10-must-read-tips-for-optimal-website-security\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.heartinternet.uk\/blog\/10-must-read-tips-for-optimal-website-security\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.heartinternet.uk\/blog\/wp-content\/uploads\/2015\/06\/category_your_business1.jpg\",\"datePublished\":\"2012-04-17T11:48:01+00:00\",\"description\":\"9 must read tips for optimal website security - Written by the team at Heart Internet.\",\"breadcrumb\":{\"@id\":\"https:\/\/www.heartinternet.uk\/blog\/10-must-read-tips-for-optimal-website-security\/#breadcrumb\"},\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.heartinternet.uk\/blog\/10-must-read-tips-for-optimal-website-security\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/www.heartinternet.uk\/blog\/10-must-read-tips-for-optimal-website-security\/#primaryimage\",\"url\":\"https:\/\/www.heartinternet.uk\/blog\/wp-content\/uploads\/2015\/06\/category_your_business1.jpg\",\"contentUrl\":\"https:\/\/www.heartinternet.uk\/blog\/wp-content\/uploads\/2015\/06\/category_your_business1.jpg\",\"width\":1620,\"height\":720},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.heartinternet.uk\/blog\/10-must-read-tips-for-optimal-website-security\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.heartinternet.uk\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"9 must read tips for optimal website security\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/heartblog.victory.digital\/#website\",\"url\":\"https:\/\/heartblog.victory.digital\/\",\"name\":\"Heart Internet\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\/\/heartblog.victory.digital\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/heartblog.victory.digital\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-GB\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/heartblog.victory.digital\/#organization\",\"name\":\"Heart Internet\",\"url\":\"https:\/\/heartblog.victory.digital\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/heartblog.victory.digital\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.heartinternet.uk\/blog\/wp-content\/uploads\/2025\/02\/HeartInternet_Logo_Colour.webp\",\"contentUrl\":\"https:\/\/www.heartinternet.uk\/blog\/wp-content\/uploads\/2025\/02\/HeartInternet_Logo_Colour.webp\",\"width\":992,\"height\":252,\"caption\":\"Heart Internet\"},\"image\":{\"@id\":\"https:\/\/heartblog.victory.digital\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/heartinternet\/\",\"https:\/\/x.com\/heartinternet\",\"https:\/\/www.linkedin.com\/company\/heart-internet-ltd\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/heartblog.victory.digital\/#\/schema\/person\/58ed7f27cc0f3ab6e69135742a5eee28\",\"name\":\"Eliot Chambers-Ostler\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/heartblog.victory.digital\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/www.heartinternet.uk\/blog\/wp-content\/uploads\/2025\/08\/cropped-Eliot-96x96.jpg\",\"contentUrl\":\"https:\/\/www.heartinternet.uk\/blog\/wp-content\/uploads\/2025\/08\/cropped-Eliot-96x96.jpg\",\"caption\":\"Eliot Chambers-Ostler\"},\"url\":\"https:\/\/www.heartinternet.uk\/blog\/author\/eliot-chambers-ostler\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"9 must read tips for optimal website security - Heart Internet","description":"9 must read tips for optimal website security - Written by the team at Heart Internet.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.heartinternet.uk\/blog\/10-must-read-tips-for-optimal-website-security\/","og_locale":"en_GB","og_type":"article","og_title":"9 must read tips for optimal website security - Heart Internet","og_description":"9 must read tips for optimal website security - Written by the team at Heart Internet.","og_url":"https:\/\/www.heartinternet.uk\/blog\/10-must-read-tips-for-optimal-website-security\/","og_site_name":"Heart Internet","article_publisher":"https:\/\/www.facebook.com\/heartinternet\/","article_published_time":"2012-04-17T11:48:01+00:00","og_image":[{"width":1620,"height":720,"url":"https:\/\/www.heartinternet.uk\/blog\/wp-content\/uploads\/2015\/06\/category_your_business1.jpg","type":"image\/jpeg"}],"author":"Eliot Chambers-Ostler","twitter_card":"summary_large_image","twitter_creator":"@heartinternet","twitter_site":"@heartinternet","twitter_misc":{"Written by":"Eliot Chambers-Ostler","Estimated reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.heartinternet.uk\/blog\/10-must-read-tips-for-optimal-website-security\/#article","isPartOf":{"@id":"https:\/\/www.heartinternet.uk\/blog\/10-must-read-tips-for-optimal-website-security\/"},"author":{"name":"Eliot Chambers-Ostler","@id":"https:\/\/heartblog.victory.digital\/#\/schema\/person\/58ed7f27cc0f3ab6e69135742a5eee28"},"headline":"9 must read tips for optimal website security","datePublished":"2012-04-17T11:48:01+00:00","mainEntityOfPage":{"@id":"https:\/\/www.heartinternet.uk\/blog\/10-must-read-tips-for-optimal-website-security\/"},"wordCount":912,"commentCount":4,"publisher":{"@id":"https:\/\/heartblog.victory.digital\/#organization"},"image":{"@id":"https:\/\/www.heartinternet.uk\/blog\/10-must-read-tips-for-optimal-website-security\/#primaryimage"},"thumbnailUrl":"https:\/\/www.heartinternet.uk\/blog\/wp-content\/uploads\/2015\/06\/category_your_business1.jpg","articleSection":["Your Business","Your Website"],"inLanguage":"en-GB","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.heartinternet.uk\/blog\/10-must-read-tips-for-optimal-website-security\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.heartinternet.uk\/blog\/10-must-read-tips-for-optimal-website-security\/","url":"https:\/\/www.heartinternet.uk\/blog\/10-must-read-tips-for-optimal-website-security\/","name":"9 must read tips for optimal website security - Heart Internet","isPartOf":{"@id":"https:\/\/heartblog.victory.digital\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.heartinternet.uk\/blog\/10-must-read-tips-for-optimal-website-security\/#primaryimage"},"image":{"@id":"https:\/\/www.heartinternet.uk\/blog\/10-must-read-tips-for-optimal-website-security\/#primaryimage"},"thumbnailUrl":"https:\/\/www.heartinternet.uk\/blog\/wp-content\/uploads\/2015\/06\/category_your_business1.jpg","datePublished":"2012-04-17T11:48:01+00:00","description":"9 must read tips for optimal website security - Written by the team at Heart Internet.","breadcrumb":{"@id":"https:\/\/www.heartinternet.uk\/blog\/10-must-read-tips-for-optimal-website-security\/#breadcrumb"},"inLanguage":"en-GB","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.heartinternet.uk\/blog\/10-must-read-tips-for-optimal-website-security\/"]}]},{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/www.heartinternet.uk\/blog\/10-must-read-tips-for-optimal-website-security\/#primaryimage","url":"https:\/\/www.heartinternet.uk\/blog\/wp-content\/uploads\/2015\/06\/category_your_business1.jpg","contentUrl":"https:\/\/www.heartinternet.uk\/blog\/wp-content\/uploads\/2015\/06\/category_your_business1.jpg","width":1620,"height":720},{"@type":"BreadcrumbList","@id":"https:\/\/www.heartinternet.uk\/blog\/10-must-read-tips-for-optimal-website-security\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.heartinternet.uk\/blog\/"},{"@type":"ListItem","position":2,"name":"9 must read tips for optimal website security"}]},{"@type":"WebSite","@id":"https:\/\/heartblog.victory.digital\/#website","url":"https:\/\/heartblog.victory.digital\/","name":"Heart Internet","description":"","publisher":{"@id":"https:\/\/heartblog.victory.digital\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/heartblog.victory.digital\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-GB"},{"@type":"Organization","@id":"https:\/\/heartblog.victory.digital\/#organization","name":"Heart Internet","url":"https:\/\/heartblog.victory.digital\/","logo":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/heartblog.victory.digital\/#\/schema\/logo\/image\/","url":"https:\/\/www.heartinternet.uk\/blog\/wp-content\/uploads\/2025\/02\/HeartInternet_Logo_Colour.webp","contentUrl":"https:\/\/www.heartinternet.uk\/blog\/wp-content\/uploads\/2025\/02\/HeartInternet_Logo_Colour.webp","width":992,"height":252,"caption":"Heart Internet"},"image":{"@id":"https:\/\/heartblog.victory.digital\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/heartinternet\/","https:\/\/x.com\/heartinternet","https:\/\/www.linkedin.com\/company\/heart-internet-ltd"]},{"@type":"Person","@id":"https:\/\/heartblog.victory.digital\/#\/schema\/person\/58ed7f27cc0f3ab6e69135742a5eee28","name":"Eliot Chambers-Ostler","image":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/heartblog.victory.digital\/#\/schema\/person\/image\/","url":"https:\/\/www.heartinternet.uk\/blog\/wp-content\/uploads\/2025\/08\/cropped-Eliot-96x96.jpg","contentUrl":"https:\/\/www.heartinternet.uk\/blog\/wp-content\/uploads\/2025\/08\/cropped-Eliot-96x96.jpg","caption":"Eliot Chambers-Ostler"},"url":"https:\/\/www.heartinternet.uk\/blog\/author\/eliot-chambers-ostler\/"}]}},"_links":{"self":[{"href":"https:\/\/www.heartinternet.uk\/blog\/wp-json\/wp\/v2\/posts\/5315","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.heartinternet.uk\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.heartinternet.uk\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.heartinternet.uk\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.heartinternet.uk\/blog\/wp-json\/wp\/v2\/comments?post=5315"}],"version-history":[{"count":0,"href":"https:\/\/www.heartinternet.uk\/blog\/wp-json\/wp\/v2\/posts\/5315\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.heartinternet.uk\/blog\/wp-json\/wp\/v2\/media\/8208"}],"wp:attachment":[{"href":"https:\/\/www.heartinternet.uk\/blog\/wp-json\/wp\/v2\/media?parent=5315"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.heartinternet.uk\/blog\/wp-json\/wp\/v2\/categories?post=5315"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.heartinternet.uk\/blog\/wp-json\/wp\/v2\/tags?post=5315"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}