This is an old revision of the document!
Website Security
-
- Login, then Home > Add Site. Eg:
http://www.example.com
- Verify:
- Traffic > Links to Your Site
- Traffic > Internal Links
- Install Lynx web browser to test site. In Ubuntu:
% apt-get install lynx-cur % lynx www.example.com
- Install a sitemap following sitemap standards:
<?xml version="1.0" encoding="UTF-8"?> <urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:image="http://www.google.com/schemas/sitemap-image/1.1" xmlns:video="http://www.google.com/schemas/sitemap-video/1.1"> <url> <loc>http://www.example.com/foo.html</loc> <image:image> <image:loc>http://example.com/image.jpg</image:loc> </image:image> <video:video> <video:content_loc>http://www.example.com/video123.flv</video:content_loc> <video:player_loc allow_embed="yes" autoplay="ap=1">http://www.example.com/videoplayer.swf?video=123</video:player_loc> <video:thumbnail_loc>http://www.example.com/thumbs/123.jpg</video:thumbnail_loc> <video:title>Grilling steaks for summer</video:title> <video:description>Get perfectly done steaks every time</video:description> </video:video> </url> </urlset>
- List all files with a certain datetime stamp that match the compromised files:
% ls -l -R | grep --color=auto '2011-08-02 16:18'
- List all files with a certain string inside:
% grep -r "a search term" /var/www/ | less