what to do if a site got hacked

Hello BHW
I wanna ask you, guys, what if I had many websites in the same web hosting plan
and for ex one of those sites got hacked is there any probable attacks on my other sites that are in the same web hosting plan

If you have multiple websites hosted on the same hosting plan and one of them gets hacked, it is possible for the other sites to be affected as well. To secure all the websites on your hosting plan, not just the one that was hacked. You can Update all your CMS software, using strong passwords, implementing security plugins, and regularly backing up your website data. Additionally, you may want to consider separating your websites onto different hosting plans or using a hosting provider that has additional security measures in place to prevent cross-site contamination.

gregstereo said:

If you have multiple websites hosted on the same hosting plan and one of them gets hacked, it is possible for the other sites to be affected as well. To secure all the websites on your hosting plan, not just the one that was hacked. You can Update all your CMS software, using strong passwords, implementing security plugins, and regularly backing up your website data. Additionally, you may want to consider separating your websites onto different hosting plans or using a hosting provider that has additional security measures in place to prevent cross-site contamination.

Click to expand...

Thank you for the tips

can you suggest to me a good web hosting that provides good security?

Sure Here are some recommendations based on their reputation and features you can Check with SiteGround, Bluehost, A2 Hosting & Hostgater
Remember It's essential to take additional steps to protect your website, such as using strong passwords, keeping your software up to date, and using security plugins.

If it's not a targeted attack, all sites on the shared server could get hacked

HustleTong said:

If it's not a targeted attack, all sites on the shared server could get hacked

Click to expand...

do you have any tips to protect ourselves from this

courses_retailer said:

do you have any tips to protect ourselves from this

Click to expand...

Wordfence and wps hide login

Depends on the style of attack if other sites on your server will be compromised to.
Usually it's just WP getting compromised. So little chance of it hitting your other websites. Unless they have same vulnerability or sharing the same PW.
Assuming you're using WP, use plugins like wordfence.
Use a 2FA login.
Have a very strong password (use pw generator)
If the attacker got your root password/cpanel password, they have full control of your server. So again do 2fa & strong passwords. Don't do things that are high risk such as nulled themes/plugins/software.

uncutu said:

Depends on the style of attack if other sites on your server will be compromised to.
Usually it's just WP getting compromised. So little chance of it hitting your other websites. Unless they have same vulnerability or sharing the same PW.
Assuming you're using WP, use plugins like wordfence.
Use a 2FA login.
Have a very strong password (use pw generator)
If the attacker got your root password/cpanel password, they have full control of your server. So again do 2fa & strong passwords. Don't do things that are high risk such as nulled themes/plugins/software.

Click to expand...

Thank you so much

courses_retailer said:

Thank you so much

Click to expand...

It actually depends upon how your website got hacked, like if a hacker used some exploit in the script installed (like outdated wordpress version or any forum version like phpBB etc) then your other websites can be save, still if your web hosting provider is using some active malware and protection mechanism like imunify360 it can surely secure your other websites and even help in securing the hacked one too, and if they are using cloud linux share pro, that means all shared hosting accounts are kept separate and that can enhanced the security, so you can look for a web hosting provider that has these both installed, Cloud linux share pro as OS and imunify360.

Rule #1 - Always perform backups of your sites in case you need to recover.

gregstereo said:

If you have multiple websites hosted on the same hosting plan and one of them gets hacked, it is possible for the other sites to be affected as well. To secure all the websites on your hosting plan, not just the one that was hacked. You can Update all your CMS software, using strong passwords, implementing security plugins, and regularly backing up your website data. Additionally, you may want to consider separating your websites onto different hosting plans or using a hosting provider that has additional security measures in place to prevent cross-site contamination.

Click to expand...

chatGPT style

Writing from Experience working in a Website Hosting Company, yes it is very possible that the other websites get affected. Even if they do not belong to the same user account.

I have seen a case where 1 website got hacked, the hacker then uploaded a PHP script. The PHP script would enumerate all folders in the /var/www directory.

Then using I will say "Bruteforce", it created symlinks to the known location of config files for a lot of scripts like WordPress, Drupal, Joomla, WHMCS, PHPBB... etc.
I call it Bruteforce because it basically simply generated multiple symlinks (Weather the script was installed or not) to the config files of all those scripts for each website on that server.
So if a website had one of these scripts installed and had the wrong permissions, then the hacker could easily read those files.

Now I am not sure why, but most of these scripts have file permissions of config files set as 644. This means the owner of that account can Read, and Write the file. While every Tom, Dik, Harry, and Harry Porter can also ACTUALLY read those files. Since then, I learned to manually change the file permissions of config files to 600