Web thieves, spammers and hackers are all every where, expecially in this new modern day. for you to be safe with them, you need to observe some procedure that will keep you safe and your website healthy. Although the actions of these bad web people that derieve pleasure in making you suffer and cry can not be under mind; however in order to completely tackle the spammers issue, it is recommended to update all the third party applications like wordpress,joomla, magento CMS etc to the latest version.
Kindly follow the steps mentioned below on a regular basis to enhance any security threat if possible.
1. In your local machine (laptop, ipad, desktop etc) always use any standard anti-virus software like Norton, Kaspersky, McAfee and scan your local machine. Make sure that your local machine is not infected from any viruses or malwares. Also, ensure your computer is not having any keyloggers or spyware. (read http://en.wikipedia.org/wiki/Keystroke_logging) or http://www.actualspy.com/articles/keyloggers.html ) for more details
2. Reset the your main Cpanel password regularly. The password should contain numbers, alphabets, special characters like '@,$,%' etc. The length of the new password should not be below 6 characters. Do not store passwords in your local machine. Especially in FTP clients and Browsers. If you want to store the password, store it as a hard copy(for example, print the password in a piece of paper and keep it with you) (use http://strongpasswordgenerator.com to generate new passwords).
3. Login to Cpanel and reset the password of email accounts and FTP accounts. The password you use should satisfy the condition mentioned above in No 2. (use http://strongpasswordgenerator.com to generate new passwords).
4. Use File manager or login to server via ssh and remove all un-wanted files from the server if possible.
5. If you use any custom built application software, contact your developer and make sure that your custom application does not contain any sql-injection, remote file inclusion vulnerability.
6. You can also download your website files using any FTP client like FileZilla and scan those files using anti-virus software to check whether the website files are infected with any malicious codes or not. After cleaning all files, upload them to the server.
7. Upgrade the third-party application software to the latest stable and non-vulnerable version. Follow the steps mentioned by vendor. You should contact the vendor support for doing so.
8. Do not install any themes which are not released by a genuine vendor.
9. Never relaese your cpanel details or emails to any one except when Fajiweb Support Team as you for it and if you give your details to a 3rd party to work on your site or mail, change the accesss after the person you gave must have finished his or her work in the site
10. Always chech you email account zone in your cpanel to see if there exist any email addresss you didnt created
11. Report any suspicious act to Fajiweb Support Team immedialtely for proper investigation and nessary actions
12. Do these steps every month to make sure that your account is not used for any malicious activity.
