DEV Community

Discussion on: 10 Ways to Improve Your PHP Security

Collapse
 
otumianempire profile image
Michael Otu

Awesome post

I used to remember when content creators and bloggers say use nodejs or Django or one of those framework/tool because php is not safe. Personally, I know two people that wrote very secure core php code and didn't rely on third party lib.

They preferred php over other tools until recently where the job dictates the tools.

This is what I can add..
On a server:

  1. port 22 is default so you should change it
  2. disable logging in. Use ssh private and public keys and use passphrases
  3. allow modified port through ufw, if possible disable port 22
  4. update and upgrade frequently or configure unattended upgrade
  5. disable admin or root login and create a sudo user