Website operation security strategy and eight advantages of Shangpin China

safety control

control mechanism

System login security

Ø   Access the system login page

1. The login password of users and administrators is encrypted by MD5, and the login verification code is in the form of numbers or letters to avoid being cracked;

Database security encryption

Ø   Access database

1. Anti SQL injection: add anti SQL injection code in the page to prevent SQL injection, and the website will be detected by vulnerability scanning tool after completion;

Hacker attack shielding

Ø   Access to functional modules of each system

1. The background provides the IP address blacklist function. If it detects that a visitor has entered illegal parameters, the system will immediately add the IP to the blacklist database. This IP will not be effective for any operation of the website. It can be a single IP or a certain IP address. A filter is used to filter the IP before accessing the page. The background administrator can manage the IP. Only after the IP lock is released, The other party can only browse this website.

Security during session

Ø   Access specific pages and session variables.

1. If the user does not do anything within the time set by the administrator (15-60 minutes), the system will automatically log off the user.
1. If a user enters the page address that he or she does not have access to in the browser, the system will automatically log off the user.

Dongle

Combination of software and hardware to improve security

1. For system functions and access methods with high security requirements, encryption dogs can be used for encryption, or HTTP+SSL security protocol can be used
1. Note: The use of dongles or SSL certificates will incur an annual fee