htaccess file hacked

[Mipou]

Hi there, 

 

I installed several prestashop sites on hostpapa servers, and I never had problems.

Then I moved to planethoster, the site is often hacked. One usual problem is that the htaccess file is directly modified by hackers. I would like to know how it is possible, and what should I do to prevent it.

 

Thank you

 

PS : maybe some php or http configurations have to be done ?

 

[selectshop.at]

Put in your .htaccess of root webspace or at least on Prestashop .htaccess the following lines:

# secure htaccess file
<Files .htaccess>
 order allow,deny
 deny from all
</Files>

Insert this before or after Prestashop native code lines and not inside of it, to avoid the lines are deleted when you regenerate your .htaccess on back-office or by installation of modules.

[bellini13]

Hi there, 

 

I installed several prestashop sites on hostpapa servers, and I never had problems.

Then I moved to planethoster, the site is often hacked. One usual problem is that the htaccess file is directly modified by hackers. I would like to know how it is possible, and what should I do to prevent it.

 

Thank you

 

PS : maybe some php or http configurations have to be done ?

Maybe you should find a different host that doesn't suck

[selectshop.at]

Maybe you should find a different host that doesn't suck

Very difficult to find shared hostings not having this common problem.... Some of the one using server hardening/firewall than block Prestashop by the way that as result you will have a very slow back-office (they than block all suspected traffic...)

 

The best way to avoid hackers is to have a dedicated server and manage by your own the traffic, but this presumes that you are a technician/expert in server installation and configuration. Only by moving to another hoster will probably not solve the problem.

[bellini13]

Only by moving to another hoster will probably not solve the problem.

 

thats where the "doesn't suck" comes into play.  there are many hosting providers that actually know how to provide hosting services