In addition, to hack a website, it is not necessary to use some kind of software. An attacker can also get the data directly. For example:

from an employee who left the company and had access to the admin panel of the site — for example, if he is offended by the management or for some reason wants to harm;

the hacker sends a letter, posing as an employee of the hosting or service, and asks to give him access, ostensibly to fix some problems, or so: how to secure your site, site protection, the danger of hacking the site

you can get access to the file where the administrator short—sightedly stores accesses – therefore, it is better to use special protected programs for this.

Types of hacking

SQL injection. SQL is a programming language. And such an injection is the insertion of an SQL query into the text sent through interactive forms. SQL code is embedded in the data that is transmitted via GET, POST requests or Cookie values. It executes queries to the database. And there you can, for example, delete all information or extract data from the database.

XSS is cross—site scripting. The attack occurs by embedding code on some page of the site. This code interacts with the hackers’ remote server when a visitor opens a page. If we compare with the previous method, then this one is safe for the server. But it is harmful to the users of the site. It can also be dangerous for the site if a hacker receives a cookie from the administrator of the resource. An XSS attack is possible on sites where there are security gaps.

Vulnerabilities in CMS. We have already written about this in the previous section. Knowing which engine you are using, a hacker can look for weaknesses in it.

An unreliable password. Think about password security if you use one of the most popular: