Haumaru Pūmau

The Security page collects every protection for a single site in one view: certificate status, malware scanning, vulnerability reports, login hardening, country filtering, hotlink protection, and an…

Kō ngā Whakapaipai Tūmataiti

Ko te whārangi Tūmataiti e kohikohi ana i ngā paripari katoa mō tētahi pae takitahi i roto i tētahi tirohanga: te āhuatanga o te tīhtihi, te raupapa kaipatua, ngā pūrongo whakapokepoke, te whakapakari takiuru, te tāpiri whenua, te paipai whakatuhi, me te rārangi tāmitamita IP. Ka haere tēnei āpitihanga i ia paepae me te aha hei mahi.

Te Wāhi o Kō ngā Whakapaipai Tūmataiti i KPanel

Ko te huarahi hei whakatae i a ia e whakawhānuitia ana ki te momo pae:

Takiuru ki KPanel.
Pāwhiri i Websites kei te taha maui, katahi ka pāwhiri i te pae.
Mō tētahi pae WordPress, WooCommerce rānei, whakatuwhera i WordPress, katahi i Kō ngā Whakapaipai Tūmataiti. Mō tētahi pae tūturu, PHP, Node.js, Python, Ruby rānei, whakatuwhera i Advanced, katahi i Kō ngā Whakapaipai Tūmataiti.

Ka tae atu koe ki /websites/<site-id>/security i roto i ngā huarahi e rua.

Te whārangi Tūmataiti mō tētahi pae i KPanel

Te Whakarāpopoto Paripari

Ki runga, ka pānui tētahi rārangi tonutanga e hia ō paripari kei te mahi, me tētahi pīriti mō ia raupapa. Ko ngā raupapa e rua tēnā: ko ō tīhtihi, ko te āhuatanga kaipatua, ko te tiaki takiuru, me ngā whakapokepoke, ā ko ia pīriti he kakariki inā kei te pai, he amber inā e hiahia ana i te mahi.

Whakamahia hei whakamatautau titiro. Ki te kakariki te pīriti katoa, kaore he mea kei tēnei whārangi e hiahia i a koe āianei.

Tīhtihi SSL

Ko te paepae tīhtihi e whakaatu ana i ngā rā e toe ana, ko te kaupapa, ko te kaiwhakatupu, ko te rā mutunga, me ngā mana katoa e hipoki ana te tīhtihi. Ko te pīriti rā e toe ana ka hurihuri ki amber, katahi ki te whero i te tata o te mutunga.

Ka ahuatanga anō ngā tīhtihi. Ko te pōtini Renew now kei konei mō te whakatūpuranga kōrure ahuatanga kua rahua, he nui te nuinga he tīni te DNS nō te wā, he nui rānei tētahi mana kei te tīhtihi kaore nei e hoki atu ki te pae.

E rua ngā potini whakapakari ki raro:

HSTS e whakahau ana ki ngā pokapū kia whakamahi tonu i HTTPS mō te mana, ka tiaki ai i ngā whakatika whakaware me ngā arero reti.

Ka maumahara a HSTS e te pokapū mō te roa o te wā, ā kaore e taea te tango i a ia i te kaitirotiro kua kite mai. Me whakahohe anake i a ia i te wa kua mohio koe he pai harikoa te wāhi katoa o te pae, tae atu ki ngā pae-whakahaere katoa e whakarite ana, i runga HTTPS. Me whakahohe i te pae me te ihirangi HTTP hererua ka pakaru ai ngā mea e kore e taea e koe te tiki mai ki te tawhiti. Tirohia Fixing Mixed Content Warnings mua anō.

OCSP stapling ka tere ake me te hohonu ake o ngā tĩkanga TLS mā te tuku atu e te kaupapa anake te āhuatanga whakakore tīhtihi. Kaore he raru ki te waiho i a ia.

Mō ngā tīhtihi, tirohia SSL Certificates.

Raupapa Kaipatua

Ko te raupapa e rua i te pō otometi. Ko te paepae e whakaatu ana i te hua o te raupapa hou rawa, te hītori raupapa, me te pōtini Scan now mō tētahi mahi katawhiti, ka tatari ai.

Ki te ma te pae, kāore te paepae me te tau o ngā konae raupapahia me te wā whakaoti.

Ki te mate ngā konae, ka whakarārangihia ia tētahi me tōna huarahi me te ingoa whakatupuranga, kei te pūkete whero. Ko ētahi e tāia ā Auto-quarantined, ko te tikanga kua makaia āna kua oti. Mō ērā atu, he pōtini Quarantine ka neke ai te konae.

Ka nekeneke te konae i te roto o te pae. Ki te konae patua tērā he wāhanga tika o tētahi kaupapa, kōtiti rānei kua whakarereke, ko te nekeneke ai ka pakaru pea te pae. Tango atu i tētahi tukurunga i mua i te nekeneke, koia nei koe e whai huarahi hoki. Tirohia Taking a Backup.

Ko te raupapa kaipatua e kitea ana e hiahia he aha i tō pae. Ko te whakaora konae he haurua noa iho o te mahi: whakarereke i ō kupuhanga, whakahou i ngā mea katoa, me te mahi i te ahuahanga o te whakatutuki kaipatua, mē nō, ka hoki atu koe i te wiki e heke mai.

Ko te auto-quarantine he mahere tohu i te Managed WordPress. I ērā atu mahere, ka haere tonu te raupapa me te nekeneke a te tangata.

Raupapa Whakapokepoke

Ko te paepae whakapokepoke e whakarārangi ana i ngā āhuatanga tūmataiti e mōhiotia ana i roto i ō WordPress matua, kaupapa, me ngā kōtiti, raupapa ia rā i ngā raupapa CVE.

Ko ia raupapa e whakaatu ana i tētahi pīriti take tonutanga, ko te wāhanga me tōna putanga, ko te tohu CVE mēna he tētahi, ko te taitara, ko te putanga i whakaoti ai, me te wā i te tuatahi i kite. Ko tētahi pōtini Dismiss ka huna ai tētahi raupapa kua āta whakaaro koe me te whakaae.

Pīkau resolved i roto i te pane paepae kia kite ai i ngā āhuatanga kua whakaoti, ia tētahi me te rā i te whakaoti.

Ko te rārangi Fixed in ko te wāhanga mahi: e whakaatu ana ki a koe te putanga tika kia whakahou. Ko te nuinga o ngā raupapa ka tutuki mā te whakahou i te wāhanga. Tirohia WordPress Updates.

Ko te raupapa whakapokepoke he tohu mahere kei te Managed WordPress. I ērā atu mahere, ka whakarereke i te paepae i tētahi pāwhanga e whakahau ana i te āhuatanga me tētahi hononga kia whakapiki.

Tiaki Takiuru Brute-Force Login

Ko tēnei paepae e aroturuki ana i ngā whakaputa takiuru ki ō WordPress takiuru me te tāmitamita i ngā pūwāwā e rahua ana. Ko tētahi wāhi me te rima noa atu, nui ake rānei ngā mahi rahua i ngā meniti tekau kei te tāmitamita aunoa mō te haora.

E rima ngā tatariki e whakaatu ana i ngā wāhi tāmitamita inaianei, ngā wāhi e aroturuki ana engari kaore anō i te tāmitamita, te tapeke tāmitamita mai i te muri o te whakamahi anō, te tapeke ngā mahi rahua, me ngā tononga takiuru hou. Ka whakarārangihia ngā wāhi tāmitamita inaianei ki raro.

E tipu ana ngā tau nui i konei me te ao paerewa, ā kaore he tohu he aha i te pāpā. Ko ia pae WordPress tūmatanui ka raupapahia tonutanga. Ko te mea e whai wāhi: ko te tapeke tāmitamita e tipu ana, koia nei e tohu ana he mahi a te tiaki.

Ko te tiaki takiuru he tohu mahere kei te Managed WordPress. Ki te kaore e whai mea, kaore te paepae.

Tāpiri Whenua IP

Ko tētahi paepae whakarāpopoto e whakaatu ana mēna kei te mahi te tāpiri whenua me te tokomaha o ngā whenua kei te tāmitamita, kei te tuku rānei. Pāwhiri i Configure kia whakatuwhera ai i te pokapū whenua katoa.

Ko te tāpiri whenua he tāpiri whakapotikotika, ehara i te tepe. Ko ia tangata kei te VPN ka kitea he āko. Ko te kōrero katoa, tae atu ki te tiaki haumaru mō te tukurunga-anoa noa rānei, kei Country Blocking for a Site.

Paipai Whakatuhi

Ko te paipai whakatuhi ka tīpako i ērā atu paetukutuku e whakaatu ana i ō āta āhuatanga me ngā mirimiri a te tangata, ka kai i ō pūkete haumaru kia whakarite ai i te pae o tētahi atu.

Whakahohe me Turn on. Ko ngā kai tūturu, ngā mīhini rapu, me ō pae anake ka haere harikoa.

I te whakahohe, ka taea e koe te tāpiri i ngā mana whakaae, tēahi noa iho i te wā, i te āhua example.com rānei *.example.com. Ko ō mana anake he whakaae aunoa, nō reira ko te rārangi mō ngā pae hoa e whakatuhi aunoa i ō mirimiri. Tangohia tētahi tuhinga me te kore rahi kei tēnei taha.

Rārangi Tāmitamita IP

Ko te rārangi tāmitamita ka whakakaatia ngā wāhi tino motuhake, ngā tohu CIDR rānei.

Whakauru i tētahi wāhi IP, he tohu CIDR rānei.
Tāpiri ake i tētahi take, he mea pai kia mōhio ai koe i te muri, he aha i konei.
Pāwhiri i Block.

Ka whakarārangihia ia tuhinga me te take me tētahi āhua tūru hei whakaiti.

Ko tēnei te taputapu tino. Ki te mōhio koe ki te wāhi pono e whakatupuranga ana, tāmitamita i konei kaore i te tāmitamita i tōna whenua katoa.

Whakapakari PCI-DSS

I ngā toa WooCommerce whakahaere, ko tētahi paepae atu e whakatairanga i ngā tukanga kia āhuatanga SAQ-A. E whakaatu ana i ngā raupapa e whā me te mahi o ia tētahi:

E kore i te whakamahi i te akunuinga konae WordPress.
Ka whakatīkina ngā whakarereke konae i te ahuahanga.
Ka roa i a SSL mō ngā tononga ahuahanga.
Ko te XML-RPC ka tāmitamitahia i te kaupapa paetukutuku.

Apply all hardening ka whakahohe, me Remove hardening ka hoki whakamuri.

Ko te whakatīkina i ngā whakarereke konae ka whakatīkina ai te tāpiri, te whakahou rānei i ngā kōtiti me ngā kaupapa i roto i te admin WordPress. Ko tērā te kaupapa, engari ka rereke te āhuahanga o te mahi. Whakaritea ō mahi whakahou i mua i te whakamahi. Tirohia WordPress Plugins.

Ko te whakamahi i ēnei āhuahanga he tupuranga pai kia āhuatanga SAQ-A, ehara i te mōhiotanga. Ko ō āhuahanga utu me ō āhuahanga kē koe e whakatau ai i tō āhuatanga tino.

He Āhuahanga Whakatupuranga Ngākau

I te wiki: tirohia te whakarāpopoto paripari. Mahi anake mēna he amber te pīriti.
I te wā ka puta tētahi whakapokepoke: whakahou i te wāhanga kua tāia ki te putanga kei raro i Fixed in.
I mua i tētahi whakarereke ohorere: tango atu i tētahi tukurunga.
I te tohu tīhtihi: tirohia i te DNS e tohu tonu ana ki te pae, katahi whakamahi i Renew now.
Kua mahue i te whakatupuranga te manomano: raupapa kaipatua a-ringa, whakarereke i ngā kupuhanga katoa, me te whakahou i ngā mea katoa.

Ngā Whārangi Pūtahi

Password-Protecting a Site mō tētahi tepe whakaae tino.
Country Blocking for a Site mō te tāpiri whenua-ā-āhuahanga.
Two-Factor Authentication mō tō kaute Kapsule anake.
Taking a Backup i mua i te whakarereke i te mea i tēnei whārangi.