Chapter 9. Server Security

When you run a publicly available Web server, nothing's more important than security. Web server compromises are common, and can result in anything from a defaced Website to a cracker taking full ownership of the server.

---

Note: It must be stressed that security is an ongoing process; you can't just set up a server as "secure" and never think about security again. You must keep the software that you use up-to-date, and regularly check for and apply security updates. Nevertheless, you can take steps both to decrease the chance that your server will be compromised and, in the worst case scenario, to limit the damage that can be done by a cracker who manages to breach the server's security.

---