Website Security
In one sentence
Keeping a site from being compromised, injected, or used to attack its visitors.
Analogy Mental model
Locks, cameras and an alarm at the house. Not because a burglary is expected this week, but because the cost of one is different in kind.
In practice What you actually do
Patch the platform and its plugins on a schedule, use unique passwords with second factors on every admin account, limit login attempts, and keep restorable backups off the server. Everything else is detail.
Where people get burned Pitfalls
A compromised site is flagged, traffic stops within hours, and recovery is measured in weeks. The most common entry point is an outdated plugin nobody remembered installing.
This entry was written in English from the Chinese original, not machine-translated. Read the Chinese version →