WDD-LO1-MANAGE SECURE SITES
Describe how each of the following are implemented.
Keeping software up to date: Outdated webpages will not be protected from modern viruses.
Block SQL Injection: SQL injection inject codes into SQL and causes passwords leaks and corrupted files in the database.
Prevent XSS: XSS (Cross-site scripting), To avoid the attacker tries to pass JavaScript or another scripting code into a web form in an attempt to run malicious code for visitors to your site. When creating a form it is important to always double check.
Providing Minimal Error Messages: Be careful with how much information you give away in your error messages. provide only minimal errors to your users, to ensure they do not leak secrets present on your server.
Server Side Validation: information sent to the server and validated
Passwords: A word or string of characters used for user authentication to prove identity or access approval to gain access to a resource (example: an access code is a type of password)
Denying File Uploads: no need to upload file
HTTPS: The secure version of HTTP, the protocol over which data is sent between your browser and the website that you are connected to.
Website Security Tools: It offers a range of useful tools to prevent DDoS attacks and various virus injection.
Comments
Post a Comment