Archive for January, 2009

The Dangers of Insecure Web Applications

Software can be used for many great things but there is a gloomy dark side.  It also comes in the form of malicious programs and the web is literally infested with these harmful applications.  Sadly, thousands of internet users download malicious software everyday, blind to the fact that they are essentially inviting threats right into their systems.  These risks have the potential to be even more dangerous when a website is involved.  Any software code running on a web server poses a great threat for the mere fact that it contains an executable file.  This means that it can be executed by anyone in the world with an internet connection.  Just imagine if there was an executable file on your desktop computer that could be executed by anyone at anytime.  If this was the case, that program would have to completely secure in order to prevent the execution of malicious code on your system.  The same goes for programs consisting of PHP or CGI scripts.

What makes executable programs even worse is that many of them accept parameters such as a user name or email address, making them more vulnerable to exploitation.  Needless to say, the web was a lot safer some five to eight years ago when the internet phenomenon wasn’t as huge.  Today, hackers are highly skilled and more determined than ever.  They will do whatever it takes to break into home-based PCs, network servers, and even the applications on your website.  If your scripts are not probably secured, you stand the risk of losing essential data that can stir up all sorts of trouble.

Here are just a few examples of what can happen when your scripts are not properly secured:

Hijacking of your mail server: You may ask, “what’s the point?”.  The answer all boils down to legality.  Although you couldn’t tell on the surface, spam is illegal in most countries and if the authorities catch you doing it, you could find yourself in big trouble.  By hijacking the mail server, a spammer can use your domain to distribute mass mailings of spam.  When the authorities find out, it all leads back to you.

Hijacking of your website: Ever run across a family-friendly site and wondered why is was littered with pornographic images?  This my friend is website hijacking, more commonly known as defacing.  A poorly configured script can invite an intruder into your site, give them enough time to setup their own credentials and leave you out in the cold.

Attacks on other machines: Leave the door open for a hacker and they just might force you to participate in a strike against other machines.  Known as a DDoS attack, the hacker slips through your insecure script and installs a rootkit which opens a backdoor that gives them complete control over the server.  This could eventually cause problems for both you and your web host.

With the responsibility of administering the server, it is up to your web host to provide a secure environment.  As a webmaster however, it is up to you to make sure your web applications are properly scripted and secure.  Software can add instantly functionality to your site but if you’re not careful, it can also be your worst nightmare.

Category: Security Issues
Tags: , , , , , , ,
Posted on Friday, Jan 23, 2009
Trackback URI   Comments RSS

What Makes a Good Domain?

Many people simply do not understand the importance of a good domain name.  Those who do are struck with the harsh reality that a vast majority of the good domains have already been registered.  If you are running a website, not only will your domain be prevalent in the internet world, but in print as well.  It acts as your identity, and is an integral part of any branding strategy.  If you have made the decision to try and establish yourself online, taking the time to find a good domain is an absolute must.

What makes a good domain?  The following tips should sum it all up for you.

Memorable

A domain name isn’t serving its purpose if no one can remember it.  Sure, it would be ideal if everyone bookmarked their favorite websites, but the fact is that most people do not.  For this reason, it is best to choose a domain that resonates and makes an impact.  Avoid complexity by keeping the name straightforward and easy to remember.

Short and Sweet

While the experts say that a good domain should be no more than 20 characters long, 10 is even better.  Having a long domain name will only complicate matters.  Short and sweet is the key here because if you go over the 20 character mark, you could end up burying yourself in the deep dark corners of the web.

A Good Extension

Extensions or TLDs (Top Level Domains) represents the three letters that come after your primary name.  There are several extensions available including .com, .net, .biz, .org and the list goes on.  Keep in mind that some extensions are reserved for certain entities.  For example, .gov is reserved for government sites will .mil is for the military.  As the most popular extension, .com is what you should strive for.  If you can’t find this TLD, then .net would be the next best alternative.

Spelling

When choosing a domain, try to stay away from names that are difficult to spell.  Many people are not good at spelling, thus, if you pick something more complex, your potential visitors could end up at a competitor’s site.

Avoid the Flash

One of the worst things you can do is try to glamorize your domain with fancy symbols.  After all, most web surfers don’t pay attention to symbols anyway, so even if you do pick something that is memorable, your over zealousness could still lead them to another site.

Be Unique

A good domain name is one that is unique, very descriptive and tells a story in just a few characters.  What this means is that the name should instantly strike a cord with visitors and potential customers by giving them an idea of what to expect.  For example, if the website revolves around your business, using your business name for the domain would be a good idea.  If you are marketing yourself rather than a brand, don’t hesitate to go with your given name.  Besides, you have a much better chance of securing a domain under your own name than anything else.

Category: Domain Names
Tags: , , , ,
Posted on Thursday, Jan 22, 2009
Trackback URI   Comments RSS

5 Tips for Choosing a CMS

Choosing the right CMS for your website can be a real challenge.  After all, there are literally hundreds of products on the market from open-source to commercial solutions.  While the right system all depends on your individual needs, these five tips should making choosing a CMS much easier.

1. What’s Your Goal?

No two systems are the same.  Some are suited for personal sites, some for publishers while others are specifically designed for corporate solutions.  Before deciding on a particular product, it is best to decide what you plan do with it.  Are you looking for enhanced blog functionality or looking to create a huge news publishing site?  Are you trying to build a corporate intranet or create a social network?  There is a vast selection out there and most systems are geared towards a particular purpose.

2. What Functionality do You Require?

Most CMS software has the ability to be greatly enhanced while others only support limited plugins.  You need to determine the level of functionality you require out of the box as well as flexibility that grants more power in the future.  CMS features range widely but here some of the basics you will find in the more popular products.

Forums – While forums are a common feature, not every CMS supports them.  The good thing is that forums can be incorporated in a number of ways.  For example, they can be custom built into a CMS or implemented via plugin.  If your project requires forums, be sure to do some research and find out how many come included or what method is required to incorporate them.

Polls – Polls are another hot CMS feature.  If you want to allow your users to vote on specific content, you will need a product that supports this feature.

WYSIWYG Editor - Short for What You See Is What You Get, the WYSIWYG editor can make your life as an administrator much easier.  This tool offers a simple word processor interface that gives you the ability to easily add text and pictures.  If you’re not proficient with programming languages, the WYSIWYG editor is one feature you can’t do without.

3. Compatibility

When deciding on a CMS, you need to keep your web host in mind and find out if they actually support the software.  For instance, there are some systems that are entirely based on PHP while others cater to Ruby on Rails and other languages.  Aside from the language, you need to know what database your host supports.  Some products are designed for MySQL, others are designed for MS SQL.  Versions are important as well as a CMS based on PHP 5 may not integrate well on a server equipped with PHP 4.

4. Customization

Depending on your goals, you may want a CMS that is easy to customize.  Rest assured because themes are widely available for most systems.  Drupal, Joomla and Mambo are just three of many products supported by a wide range of additional themes.

5. Support

Whether its open-source or commercial, finding a CMS that offers support is vital.  If you purchase a product, be sure that you can get technical support from the vendor.  If you opt for an open-source product, be sure to select one with an active user community

Category: CMS
Tags: , , , , , , , , , , ,
Posted on Wednesday, Jan 21, 2009
Trackback URI   Comments RSS

Helms: The Ultimate Windows Control Panel

For the most part, web hosting control panels are platform specific, meaning they are designed to function with a particular operating system.  While Linux users get the benefit of the industry leading cPanel software, those who prefer Windows are not left out in the cold.  This article will introduce you to Helm, the preferred control panel for the Windows platform.

What is Helm?

Created by software developer Parallels, Helm is a powerful control application that offers numerous benefits to web hosting companies, providing the ability to automate and control their operation with ease.  Its flexibility is able to support companies of all sizes, running seamlessly on a single server or across thousands of machines.  Helm streamlines the server-to server to communication in a secure manner, allowing providers to be more efficient while cutting back tremendously on administrative time.

Scalability

Although most web hosts start out with just a few servers, having the ability to upgrade to hundreds more is crucial.  Helm provides that scalability that enables a hosting company to go from one to hundreds to thousands of servers with no lag in performance.  Its powerfully unique service distribution facility has the ability to run multiple services on any server and is even compatible with services from other providers.

Centralized Interface

Helm is a straightforward control panel that offers all the essential features and services right from the interface.  This allows companies to easily manage their customer base regardless of how many or what types of servers are being used.  Helm allows you to administer sites on everything from mail servers to remote servers.

Built-in Communication System

Helm’s simplistic approach adds ease to the task of customer relations as the integrated communications system is designed in a manner that allows you to stay in touch with your clients.  Helm automates many of these processes including the distribution of invoices and payment reminders.

Advanced Billing System

Helm is perfectly suited for a web hosting business as it providers the ability to sell virtually any type of service.  For example, customers with complex hosting packages consisting of various add-ons can be invoiced for all those services in one simple, itemized invoice.  The software also allows you to automatically bill customers for services used on a weekly, monthly or yearly basis and offers payment options such as credit card, PayPal or bank account.

Customization

Helm gives you the ability to completely brand your business into the control panel.  You can incorporate custom HTML headers and footers as well as helpful links into your customers’ control panels.  What this means is that it allows you to give Helm the look and feel of your business without losing any of its power.

Helm is the ideal control panel for web hosting solutions.  The software is highly functional yet very user-friendly to the savvy administrator.  Helm’s greatest attribute is the fact that it passes along a similar level of power and simplicity down to the end-user.  Whether you’re looking to be a web host or tackle another business, the Helm software makes a great Windows control panel.

Category: Control Panels
Tags: , , , , ,
Posted on Tuesday, Jan 20, 2009
Trackback URI   Comments RSS

Beware of Cheap Web Hosting Practices

At first glance, cheap hosting is an ideal solution for individuals and small businesses looking to create a web presence.  After all, why pay top-dollar when so many hosts are offering the same service for next to nothing?  Yes, cheap hosting appears to be the route for obvious reasons but is it really a reliable solution?  You may find this service questionable after reading about some of the most common cheap hosting practices.

The Ambitious Newcomer

It takes a lot to run a web hosting company.  Providers require servers, bandwidth and a plethora of IT experts to help maintain the infrastructure.  Those who lack the resources and expertise to run the infrastructure outsource their hosting operations to third-party professionals, thus enabling them to elude the hassle and enormous costs.  Aside from financial resources, the cost savings obtained from outsourcing is what allows many companies to offer web hosting packages at competitive prices.

Along comes a new company looking to dabble in the web hosting industry.  Noticing all the low prices on the market, they come up with the bright idea of offering their service at a fraction of the price.  What better way to increase profits and overall growth of the company?  Things usually start out well for the new ambitious web host.  With everyone searching for affordable hosting, customers flock to the cheap service provider.  The veteran hosts even notice some of their clients fleeing for the cheaper service as well.  In the spirit of competition, they also lower their prices in order to keep pace in the market.  Here’s the catch – more than likely, the prominent web hosts have the flexibility and resources that allow them to trim costs without suffering any major financial losses.  The brilliant newcomer?  Well, they usually find themselves in a world of trouble.

Cutting Back Equals More Losses

Despite all the customers, the incredibly low price leads the newcomer to cut corners and make sure the company remains profitable.  They start by relieving some of their IT staff and technical support personnel.  When that isn’t enough, they began to trim away more essential aspects of their infrastructure.  They cut back on the maintenance and security procedures that are vital to any web hosting company.  Next, they overload their servers with customers.  From there, its reducing the number of servers entirely.  The cheap web hosting provider is still in business but in bad shape.  Limited personnel and IT engineers has resulted in horrible customer service.  The lack of preventative measures leads to more hardware failures and excessive downtime.  Overloading and minimizing servers results in poor performance and you’ve guessed it, more downtime.  Now that cheap but reliable web hosting package isn’t nearly what it is was advertised to be.

There is Hope

The cheap practices of an overzealous web hosting company hurts you the most.  Fortunately, not all cheap services are cheaply run as there are several reliable hosts on the market.  There is nothing wrong with trying to save a few dollars with an affordable web hosting service .  Just don’t go too low because you might get less than you paid for.

Category: About Web Hosting
Tags: , , , , ,
Posted on Monday, Jan 19, 2009
Trackback URI   Comments RSS

« Prev - Next »

Sponsored Links