This guide explains how to prevent cyberattacks and how to avoid your website being hacked.

The role of the hosting provider

Infomaniak's job is to provide quality hosting, so it is essential to respond extremely quickly to the various and diverse attacks that any Internet player may be subject to. Infomaniak therefore does everything possible to take maximum precautions against hacking, in particular by keeping the different versions of the technologies used up to date.

In the event of a confirmed hacking incident, if it is possible to trace the perpetrator and the system was compromised due to a security flaw attributable to Infomaniak, and the integrity of the servers is at stake, Infomaniak will take matters into its own hands.

The role of the website owner and webmaster

If your website is hacked due to your own negligence (an outdated script, a security patch that has not been applied, etc.), Infomaniak will contact you to warn you about a problem that needs to be resolved quickly. Some organizations, such as Saferinternet, may also suspend the domain name, which will disable the website and email service.

Infomaniak cannot prevent exploits related to a bug in your PHP code or other code. If the hack is not detected, you will generally notice the intrusion fairly quickly through suspicious elements on your pages or by receiving numerous error emails.

It is therefore your responsibility to manage the evolution of your website over time and to ensure that it does not become neglected, even if this means hiring a webmaster whose job it is.

Infomaniak's recommendations

1. Regularly update all your web applications (WordPress, Joomla, Drupal, ownCloud, etc.).
2. Keep the PHP version of your website up to date on Infomaniak servers.
3. Keep your website up to date by migrating to the new offers when they are offered to you.
4. ‍Add a protection system to your contact forms (captcha, etc.) and to any "recommend to a friend" tools.
5. Run a antivirus scan of your hosting regularly.
6. Monitor the vulnerability detection tool.
7. Remove anything you haven't developed yourself and that the author hasn't updated/corrected for several months.
8. Make regular backups of your site (refer to this other guide if you use WordPress) when everything is working correctly and keep them in a safe place (because automatic backups are only kept for a few days, which is sometimes not enough to revert to a previous state after you notice an intrusion).
9. Visit ibarry.ch.

If a problem has occurred...

1. Change the passwords for your web applications, your FTP accounts, and your databases after first checking that your computer is free of viruses.
2. Restore a backup but Update everything that can be updated as soon as the restoration is complete.
3. If you encounter a problem with a third-party software, contact its publisher directly or a Partner and consult the support policy as well as article 11.9 of the Infomaniak Terms of Service.