In my previous posting, I discussed how users who don’t upgrade to the most recent version of WordPress can leave their websites vulnerable to hacking. But all types of websites can be hacked — not just those built with WordPress.
“If you own or manage a website, you are responsible for that website’s security. Compromised websites can infect visitors with badware, and are commonly blacklisted by search engines, web browsers, and security vendors. Many legitimate websites are the targets of malicious hacking attacks, during which code linking directly to badware is inserted onto an otherwise innocent, but poorly secured, website.” (StopBadware.org)
On a regular basis, all website owners/administrators should check their sites for badware by using these tools:
- Google’s Safebrowsing Diagnostic Tool: To test your site, use the following URL, but replace “example.com” with the name of your site:
- http://www.google.com/safebrowsing/diagnostic?site=example.com
- If I wanted to check my site, I would enter: http://www.google.com/safebrowsing/diagnostic?site=rmfcommunications.com
- Check to see if your site is listed in the Badwear Website Clearinghouse at StopBadware.org.
- View your domain’s site report at McAfee SiteAdvisor.
Hopefully, your website will pass these diagnostic tests. However, if you do find badware, you’ll need to remove it. You can find tips for doing this at StopBadware and BadwareBusters.
WordPress users can find tips on keeping WordPress installations secure at “Hardening WordPress.”
Once you’ve removed the badware from your site, you should request a review of your website from the services that have issued warnings: Google, StopBadware, and/or SiteAdvisor. If you don’t, visitors to your website may see the following warning: “This site may hurt your computer.”