View Single Post
  #251  
Old 08-07-2009, 08:21 AM
  BCSE's Avatar 
BCSE BCSE is offline
 

X-Guru
  
Join Date: Apr 2003
Location: Ohio - bcsengineering.com
Posts: 3,062
 

Default Re: Warning: Iframe based attacks using stolen FTP access info

Just don't ever use FTP. It is completely insecure. If your hosts refuses to set up sFTP then you need to get another host. Most people don't understand that with FTP, your username and password are sent over the internet every time you connect to it. So those hosting companies that disconnect you every 5 minutes just make their hosting environment even more insecure as you have to reconnect all the time, sending your password even more times unencrypted (plain text) across the internet from your PC to the server. Anyone watching traffic on your PC or on the Server or the network in between could see your password in plain text.

We have only secure connections to our servers, including secure mail connections (secure pop or secure IMAP). It just reduces your risk this way. If you get a keylogger virus on your computer, they could still get into the server even with an sFTP connection, but your risk is lower using only secure connections to the server.

Sorry to hear about your troubles!

Carrie
__________________
Custom Development, Custom Coding and Pre-built modules for X-cart since 2002!

We support X-cart versions 3.x through 5.x!

Home of the famous Authorize.net DPM & CIM Modules, Reward Points Module, Point of Sale module, Speed Booster modules and more!


Over 200 X-cart Mods available & Thousands of Customizations Since 2002 - bcsengineering.com

Please E-Mail us for questions/support!
Reply With Quote