Security of a website

Asked

Viewed 68 times

1

I’d like to ask a few questions. My site is protected against SQL Injection attacks because I am using Mysqli with bind in addition to external scripts against this problem protection. And the HTTPS certificate is activated and functional. Now the question arises: is it possible for my site to be attacked in another way? I ran a program to check for loopholes called OWASP Zed Attack and it returned me some faults alerts as XSS Header Protection and some of the things that were more about Internet Explorer. So the question is, is there any way that my site could suffer some kind of attack or be subject to failure? If so, could you send me files or content to study? I would be very grateful.

Thank you for your time and sorry about anything. Good evening.

html security-guard browser
  • 1

    No system is 100% flawed or attacked. I recommend these sites: https://www.owasp.org/index.php/Main_Page and https://security.stackexchange.com/

  • You cannot leave out input validation, if you are waiting for a numerical input then what happens if you send string? If you are waiting for a 60-char string, what happens if you send one with 21442412 chars? etc. O @Valdeirpsr, left good refs and you can start there

  • Hello. Validation of inputs has already been well worked out. Thanks for the comments

1 answer

0

Beauty friend, this is a question that only has an answer "your site will never be fully protected" it may be hindering the types of attack as it did protecting from SQL Injection attacks, but as for example has a site it has a limit of supportable connections in which if you do not set the amount of maximum connections allowed (which in many sites is not done) a simple attack Dos or Ddos can leave your site off the air, this can be avoided if in your project determine the maximum amount if connections allowed.

  • In this case, I am already protected against Ddos attacks also because my site is hosted in the company OVH, a cutting-edge host when it comes to Ddos attacks

  • @Strepk Ddos is only avoided with server handling, not in the application

  • Yeah, the server’s from OVH, check out Google DPS. But I really wanted to know was on the application in question of invasion and stuff like, not about Ddos itself.

Browser other questions tagged html security-guard browser

You are not signed in. Login or sign up in order to post.