[Alfa1]

- Better contact your hosting company and ask them to up the servers security. This should not be just one phonecall, but a process of making your security better. You will probably find how good or bad your hosting co is.
- Study phpinfo.php to see what you have turned on. Ask your host to shut down anything that you do not need.
- Make sure that you do not have any directories accessible, writeable or executable for the public that should not be.
- Make sure all software on your server is up to date. Old software often has exploits.
- See if you can find someone that is versed in IT security or hacking and let them examine your site's security holes.
- Study your server's logs and your admin logs. IP ban problematic IP's.
- If your server can be overloaded easily, then consider blocking the FTP and pop3 service for all but your IP's.
- Learn from every attack. Find out what has gone wrong. Solve the problem and wait for the next attack.
- Keep an eye on whos online during attacks and ban the hackers accounts.
- Make your staff switch passwords regularly
- Do NOT under any circumstance allow your staff to have hotmail, yahoo or Gmail accounts.
- Make your staff aware of page spoofing. Page spoofing is the simplest method for hackers to get your password. So in other words: never log in on a page, that you have arrived at, following a link sent to you.