在 vps 上保护 Codeigniter 商业网站的最后步骤？
我即将启动我的电子商务网站，该网站是基于 codeigniter 框架构建的，我只是想知道在启动之前是否应该做一些不太明显的安全事情。
我已经有一个 SSL 证书来处理站点信用卡处理，并且我已经更改了 codeigniter 配置文件以抑制 php 错误等。我还利用 csrf_protection 库并使用 Tank auth 库进行登录/注册。
还有什么我应该在这里做的吗？
I am about to launch my e-commerce site, which is built on the codeigniter framework, and I was just wondering if there are some not so obvious security things I should do before launching.
I have an SSL cert already to handle in site credit card processing, and I have changed the codeigniter config files to supress php errors etc. I also am utilizing the csrf_protection library and using the tank auth library for logins/registrations.
Is there anything else I should be doing here?
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（2）
您采取了哪些措施来保护 VPS 本身的安全？
一些示例：
您是否拥有所有软件最新？您应该确保整个操作系统没有安全更新。
另外，请确保不要在任何管理员帐户上使用易于猜测的密码。如有疑问，请将它们写得长且难以猜测。
如果您在内部处理信用卡，则必须满足 PCI 合规标准。
What have you done to secure the VPS itself?
Some examples:
Do you have all your software up-to-date? You should make sure there are no security updates for the entire OS.
Also, make sure you don't use easy-to-guess passwords on any admin accounts. When in doubt, make them long and hard to guess.
If you are handling credit cards internally, you should have had to meet PCI Compliance Standards.
SSL 证书检查：http://www.digicert.com/help/
SSL Certificate Check: http://www.digicert.com/help/