Add an option to lock/freeze a website
Hi,
some Hosts (e.g. Strato) use a functionality to completely lock a site. This is very useful for customers that dont want to do any changes to their website anymore but use an old version of a cms and forget/dont want to upgrade.
Of course there should be a warning about the consequences like non working file caching etc.
Kloptor
shared this idea
-
Olgerdas
commented
It a greate idea. Ant it very usefull for shared hosting. That feature has CWP: http://wiki.centos-webpanel.com/how-to-secure-your-website-from-hacking
4. File System Lock
This is unique CWP feature providing the full protection on the files system of the users public_html folder.
It will deny any kind of change on the files system and also disable any file uploads, and that means no more malware infections and website hacks. -
Anonymous commented
I dunno if it worths a feature, you can easily lock/unlock a site using chattr +i/-i, still if the site suffers from some kind of SQL Injection, the database is not inmutable, so your chances are the site still gets hacked, in that case, you may want to switch to a read-only user for the database.
Cheers!
-
Thx for your time.
The benefits of locking over not touching a website is only based on security issues.
Several customers use old versions of different cms and don't have the time, money or willingness to upgrade and update them. Other customers use self-programmed dynamic websites.Both scenarios are very common among small and medium sized companies. This starts to be a security and/or performance threat for the whole (virtual)system when the sites get, often competely automatic, hacked. This consequently not only affects the customer but also the host.
My proposal is:
- add an option to lock a site. No changes to the filesystem are permitted (+warning)
- add an option to guard a site. Send an email whenever files are changed or created (once a day maximum)As i mentioned Strato uses this an i am very happy with this functionality (german: https://www.strato.de/faq/article/455/Was-ist-STRATO-SiteGuard-und-wie-richte-ich-ihn-ein.html)
best regards