Web Hosting provides the infrastructure to publish your web site. Our Web Hosting service includes space on a web server to store your web site, bandwidth to send it out to the world, configuration capability to associate your domain name with the web site content, and more.

Can I have more than one domain name pointed to my Web Hosting account?
You can have an unlimited number of domain names per Web Hosting account.

[Top]

[Top]

[Top]

[Top]

[Top]

[Top]

[Top]

[Top]

[Top]

[Top]

[Top]

[Top]

[Top]

[Top]

[Top]

[Top]

[Top]

[Top]

[Top]

[Top]

[Top]

[Top]

[Top]

[Top]

How do I manage my VPS?
Managed VPS hosting accounts come with popular WHM / cPanel control panel.

WHM is the hosting administration control panel. It allows you the manage and create hosting accounts in your VPS. Some functions you can perform include create and manage all hosting accounts, limit accounts disk space, bandwidth, email accounts, email all accounts, change account passwords, check server status.

cPanel is the hosting accounts control panel which allows you to manage the individual hosting account. Functions include create/remove email accounts and forwarders, view website stats via AWstats, view account information such as bandwidth usage, manage domains, subdomains, parked domains, manage and create mysql databases, add/remove FTP accounts, use advanced tools such as cron jobs, hotlink protection, access to pre-installed scripts such as Fantastico.

There's no control panel included in unmanaged VPS plans and you need to do operations from the command line, using popular Putty or WinSCP software.

[Top]

1. Log in to the GoDaddy site. 
   
2. Select My Account > Domain List. Select the domain name you want to update.  
   
3. Next to the Host Summary header, click Add. 
   
4. Enter "ns1" in the host name field and the IP address you've received from us in the IP address 1 field. Click OK. 
   
5. Repeat this process for the second set of fields, entering "ns2" in the host name field and the IP address you've received from us in the IP address 2 field.

[Top]

1. Log into the Namecheap website. 
   
2. Select My Account > Manage Domains. Select the domain name you want to update.  
   
3. In the Advanced Options section, select Nameserver Registration. 
   
4. Enter the following two nameservers and IP addresses and then click Add nameservers: 
   
   ns1.your_domain_name.com (192.1.2.3) 
   ns2.your_domain_name.com (192.1.2.3) 
   
   Note: In the examples above, replace your_domain_name.com with your registered domain name and IP addresses with the IP's you've received from us.

[Top]

1. Log into the Enom.com website. 
   
2. In the menu on the left, select Domain Names. 
   
3. Also in the left menu, select Register DNS. 
   
4. If you are registering the nameservers for the first time, use the section titled Register a NameServer Name. 
   
5. If you have previously registered nameservers for your domain, use the section titled Update a NameServer IP. 
   
6. Enter the information provided in the e-mail you received when you first set up your account with Enom.com. 
   
7. In the Nameservers section, enter the following information:

ns1.your_domain_name.com - IP address (192.1.2.3) 
ns2.your_domain_name.com - IP address (192.1.2.3) 

Note: In the examples above, replace your_domain_name.com with your registered domain name and IP addresses with the IP's you've received from us.

[Top]

[Top]

[Top]

What is SSL and what it actually does for you?
SSL is the acronym for Secure Sockets Layer and is the Internet standard security technology used to establish an encrypted (or safe) link between a web server (website) and your browser (i.e. Internet Explorer, Chrome, Firefox, etc…). This secured link ensures that the data/information that is passed from your web browser to the web server remain private; meaning safe from hackers or anyone trying to spy/steal that info. SSL is the industry standard and is used by millions of websites to protect and secure any sensitive or private data that is sent through their website. One of the most common things SSL is used for is protecting a customer during an online transaction.

[Top]

If your site sends or receives sensitive information such as customers personal information, credit card details, etc., customers expect it to be secured with an SSL certificate. Many will leave your site if they see that it is not secured.

[Top]

The number of businesses that use SSL have increased tremendously over the past few years and the reasons for which SSL is used has also increased, for example:
• Some businesses need SSL to simply provide confidentiality (i.e. encryption)
• Some businesses like to use SSL to add more trust or confidence in security and identity (they want you to know that they are a legitimate company and can prove it)
As the reasons companies use for SSL have become wider, three different types of SSL Certificates have been established:

• Extended Validation (EV) SSL Certificates
• Organization Validation (OV) SSL Certificates
• Domain Validation (DV) SSL Certificates

Extended Validation (EV) SSL Certificates are issued only when a Certification Authority (CA) checks to make sure that the applicant actually has the right to the specific domain name plus the CA conducts a very THOROUGH vetting (investigation) of the organization. The issuance process of EV Certificates is standardized and is strictly outlined in the EV Guidelines, which was created at the CA/Browser Forum in 2007, specifies the required steps that a CA must do before issuing an EV certificate:

1. Must verify the legal, physical & operational existence of the entity
2. Must verify that the identity of the entity matches official records
3. Must verify that the entity has the exclusive right to use the domain specified in the EV Certificate
4. Must verify that the entity has properly authorized the issuance of the EV Certificate

EV Certificates are used for all types of businesses, including government entities and both incorporated & unincorporated businesses. Takes about 10 days to issue.
A second set of guidelines are for the actual CA and it establishes the criteria to which a CA needs to be audited before being allowed to issue an EV Certificate. It is called, the EV Audit Guidelines, and they are always done every year to ensure the integrity of the issuance process.

Organization Validation (OV) SSL Certificates are issued only when a Certification Authority (CA) checks to make sure that the applicant actually has the right to the specific domain name plus the CA does some vetting (investigation) of the said organization.  This additional vetted company info is displayed to customers when the Secure Site Seal is clicked on, this gives enhanced visibility to who is behind the site which in turn gives enhanced trust in the site. Takes about 2 days to issue.

Domain Validation (DV) SSL Certificates are issued when the CA checks to make sure that the applicant actually has the right to the specific domain name.  No company identity information is vetted and no information is displayed other than encryption information within the Secure Site Seal. DV certs can be issued immediately.

[Top]

Give your customers the confidence to make their purchases online with EV SSL Certificates. Extended Validation triggers the display of the green address bar in high-security browsers.

What does the green address bar do?

Customers Gain Confidence with the Green Address Bar

Extended Validation SSL gives Web site visitors an easy and reliable way to establish trust online. Only SSL Certificates with Extended Validation (EV) will trigger high security Web browsers to display a green address bar with the name of the organization that owns the SSL Certificate and the name of the Certificate Authority that issued it. The green bar shows site visitors that the transaction is encrypted and the organization has been authenticated according to the most rigorous industry standard. For better online performance and added customer confidence, choose Secure Site with EV SSL Certificates. (SSL Security and Extended Validation.)

[Top]

[Top]

[Top]

[Top]

[Top]

[Top]

[Top]

[Top]

[Top]

[Top]

[Top]

[Top]

[Top]

[Top]

[Top]

[Top]

[Top]

[Top]

[Top]

[Top]

[Top]

[Top]

[Top]

[Top]

[Top]

[Top]

[Top]

[Top]

[Top]

[Top]

My website got hacked, what to do?

This is an evolving guideline and pretty much covers all aspects of security that are your responsibility as a hosting account holder. If you follow them all, your account will remain secure and not hacked again.

Here are some tips to keep your site secure. This was primarily written in response to a hacked site:

1. First thing you need to do is check all vendor/developer sites for ALL web scripts/applications used in your account for any updates including any mod you may be using in any web application. If you are using any open source web application, that may be the prime suspect. However, you must check all and keep them up to date. Check the database on www.secunia.com for any known exploits released in public. 

2. Once you have verified that 100% of the installed scripts are the latest stable version, you will need to go through all files of your account and make sure none were uploaded by hackers before you audited or left by you from an old install of an application. There may be suspicious files in folders you would never imagine and in folders several levels down. You can use ftp or cPanel file manager to go through all files under public_html and compare them with your local copy. [You should always maintain a local copy for this comparison as well as backup.]

3. Make sure all passwords are a mix of alpha-numeric and not a dictionary word. Just because you thought of a difficult word from the dictionary does not make you safe. Please also use both capitals and lowercase and at least 8 characters.

4. The MySQL database access to all web applications should be using separate db users. Do not ever use your main account user/pass for it. Your main user/pass should never be stored in any file in your account.

5. In your control panel, activate archive option of your web logs in Raw Log Manager. This will give you the opportunity to check how the hacker exploited one of the scripts. Otherwise all raw logs are cleared after generating stats. If you have already been hacked, its too late now but you can archive the logs for future attacks.

6. If you have customized a web application with a mod, make sure it is also the latest stable version. Many popular web application may be stable but one of the addon mods may be exploitable and possibly not maintained any more.

7. If you have written some code yourself, make sure all input variables are sanitized (checked for valid data before using it). Otherwise a single line of bad code can give access to your entire account. The usual blunder is to include a file based on user input. Again, make sure all input to a script is checked for valid data. All exploits are based on input data. If your site does not take any input, you are 100% safe from web exploits, i.e. if you run 100% static HTML site with no script whatsoever anywhere in your account.

8. For PHP, any application that uses register_globals to be active has more chances of being exploitable. Avoid such applications.

9. If you have some mail script, make sure it is safe from header injection. In essence make sure that email address, subject and other part of data that is being submitted by user does not contain line breaks. Some coding assistance is provided on our forums.

10. Using open source free web applications is great but you have to maintain it by regular updates or you can loose all your data and site if a new exploit is known about it. And as a hosting account owner, it is your responsibility that you have installed only stable applications in your account.

11. If your site has been running fine for years, it does not mean there were no security holes in it. It actually means that exploit was unknown or you were lucky that no one exploited it before.

12. For added security, change the permissions of your configuration files (having database credentials etc.) to 660. You can do that via ftp or file manager. This feature can work on shared hosting servers or if your VPS/dedicated server has phpsuexec through cPanel.

13. For added security, if you can block access to certain administrative sections of your site, do that by giving access to only authorized IP addresses and blocking access for everyone else, Or password protect it.

14. If there is any file upload facility in your account, make sure that only authorized members can use it. 

Also the uploaded file should not be accessible via web URL directly (i.e. stored outside of public_html) unless

a) it is only uploaded by a site admin (responsible person)
b) checked and validated to be not exploitable

15. If there is any URL forwarding or Webmail facility for your site membership, make sure it is not given to all without proper authorization or it could be used for spamming.

16. If you're just testing / trying something, which only you need and you know you won't actively keep up to date, just lock it behind a password right away.

17. Since shared/reseller servers come with suPHP, you do not need any file or folder with world write permissions. The normal folder permissions should not exceed 755. PHP/HTML files can be 644 (or lower through ssh). CGI/Perl scripts should be 755.

18. Anyone who writes web application code, should be familiar with security. I found this book in my local Library particularly on PHP: http://www.oreilly.com/catalog/phpsec/  recommended to all. It covers all aspects of vulnerabilities found today in web applications. Found this site as well from the book: http://phpsec.org

19. Protect your website with the SSL Certificate, so information from/to your website sensitive areas will be encrypted. Learn more about SSL Certificates here , or order one here .

20. If your website is based on WordPress CMS, please learn how to harden your installation and fix cracked code from the following links:

- http://codex.wordpress.org/Hardening_WordPress
- http://codex.wordpress.org/FAQ_My_site_was_hacked
- http://wordpress.org/support/topic/268083#post-1065779
- http://smackdown.blogsblogsblogs.com/2008/06/24/how-to-completely-clean-your-hacked-wordpress-installation/
- http://www.wpbeginner.com/wp-tutorials/how-to-find-a-backdoor-in-a-hacked-wordpress-site-and-fix-it/ 

Use our Professional WebSite Security Service to Protect Your Website(s)

We can perform all above operations on your behalf - Scan and clean your website from malware, harden scripts, protect domain and put constant security monitoring on your account. Please submit a Support Request to receive special deal on this service.

[Top]