# Haumarutanga Paetukutuku Source: https://support.kapsulehost.com/mi-nz/site-security Ka kohikohingia e te wharangi Haumarutanga ngā whakamarutanga katoa mō tētahi paetukutuku kotahi ki te tirohanga kotahi: te tūnga tiwhikete, te tirotiro mōrearea (malware), ngā pūrongo whakaraerae, te whakapakari takiuru, te tātari whenua, te whakamarumaru hotlink, me tētahi rārangi ārai IP. Ka haere tēnei aratohu i ia kāri me ngā mahi me whai mā tēnā, mā tēnā. ## Kei Hea te Haumarutanga i Roto i te KPanel Ka whakaritea tō huarahi e te momo paetukutuku: 1. Takiuru ki [KPanel](https://kpanel.kapsulehost.com). 2. Pāwhiritia **Ngā Paetukutuku** i te taha maui, kātahi ka pāwhiri i te paetukutuku. 3. Mō tētahi paetukutuku WordPress, WooCommerce rānei, whakatuwherahia **WordPress**, kātahi **Haumaru**. Mō tētahi paetukutuku static, PHP, Node.js, Python, Ruby rānei, whakatuwherahia **Tautuhinga**, kātahi **Haumaru**. Ka tae ngā huarahi e rua ki `/websites//security`. ![Te wharangi Haumarutanga mō tētahi paetukutuku i roto i te KPanel](https://support.kapsulehost.com/help/screenshots/site-security.62ee8e5b.webp) ## Te Whakarāpopototanga o ngā Whakamarutanga I runga rawa, e kī ana tētahi rārangi kotahi i te maha o ō whakamarutanga kei te mahi, me tētahi "pill" mō ia haki. Ko ngā haki ko tō tiwhikete, te tūnga mōrearea, te whakamarutanga takiuru, me ngā whakaraerae, ā, ka kākāriki ia "pill" ina ora, ka kōwhai ina whai aro. Whakamahia hei whakamātau tirohanga poto. Mēnā kākāriki katoa ngā "pill", kāore he mea i tēnei wharangi e hiahia ana i a koe i tēnei rā. ## Tiwhikete SSL Ka whakaatu te kāri tiwhikete i ngā rā kua toe, te kaupapa, te kaiwhakaputa, te rā mōkito, me ngā rohenga katoa e kapi ana i te tiwhikete. Ka huri te "pill" rā-toe ki te kōwhai, kātahi ki te whero, i a te mōkito e tata haere ana. Ka whakahōu aunoa ngā tiwhikete. Kei reira te pātene **Whakahōutia ināianei** mō te wā kua rahua te whakahōutanga aunoa, i te nuinga o te wā nā te panoni DNS, nā tētahi rohe rānei i runga i te tiwhikete kāore anō kia whakatika ki te paetukutuku. E rua ngā pātene whakapakari kei raro iho: **HSTS** e kī ana ki ngā pūtirotiro kia whakamahi tonu i te HTTPS mō te rohe, ā, ka whakamarumaru tēnei i ngā whakaekenga whakahekenga me te "stripping". > **Warning:** Ka maumaharatia te HSTS e te pūtirotiro mō te wā roa, ā, kāore e taea te tango mai i tētahi manuhiri kua kite kē. Me whakakā anake ina mōhio koe kua tika ngā wāhanga katoa o te paetukutuku, tae atu ki ngā rohe-whakararo katoa e whakaratohia ana, kei raro i te HTTPS. Mēnā ka whakakāhia i runga i tētahi paetukutuku whai ihirangi HTTP whakaranu, ka pakaru ētahi mea kāore e taea e koe te whakatika mai i tāwhiti. Tirohia tuatahi [Te Whakatika i ngā Whakatūpato Ihirangi Whakaranu](https://support.kapsulehost.com/mi-nz/ssl-mixed-content). Ka tere ake, ā, ka tūmataiti ake ngā "handshake" TLS mā te **Whakapiri OCSP**, mā te tāpaenga mai a te tūmau i te tūnga whakakorenga o te tiwhikete ake. Kāore he hē ki te waiho tonu i te whakakā. Mō ngā tiwhikete whānui, tirohia [Ngā Tiwhikete SSL](https://support.kapsulehost.com/mi-nz/ssl-certificates). ## Anana Mōrearea (Malware) Ka rere aunoa ngā anana ia pō. Ka whakaatu te kāri i te hua o te anana whakamutunga, he hītori anana, me tētahi pātene **Anana inaianei** mō te rerenga-ā-tono, ka "poll" tonu tae noa ki te otinga. Ina mā te paetukutuku, ka kī te kāri pēnā, me te maha o ngā kōnae i anaahia me te wā i oti ai. Ina kua pāngia ngā kōnae, ka rāraangihia ia kōnae me tōna ara me te ingoa whakatumatuma, i runga i tētahi papamuri whero. Ko ētahi e tapaina ana he **Auto-quarantined**, ko tōna tikanga kua whakakorehia kē te kōnae mōu. Mō ērā atu, ka nekehia te kōnae ki waho e tētahi pātene **Quarantine**. > **Important:** Ka tangohia e te "Quarantine" te kōnae mai i tō paetukutuku. Mēnā he wāhanga tūturu o tētahi "theme", "plugin" rānei kua whakarerekētia te kōnae pāngia, ka taea e te "quarantine" te pakaru i te paetukutuku. Tangohia he tāpiri haumako i mua i tō "quarantine", kia whai huarahi anō ai koe ki muri. Tirohia [Te Tango i tētahi Tāpiri Haumako](https://support.kapsulehost.com/mi-nz/taking-a-backup). Ko te kitenga i te mōrearea, he tohu kua uru mai tētahi mea. Ko te horoi i ngā kōnae, ko te haurua anake o te mahi: whakarerekētia ō kupuhipa, whakahōutia ngā mea katoa, ā, mātaihia me pēhea i uru mai ai te kaiwhakaeke, kei hoki anō koe ā te wiki e heke mai nei. Ko te "quarantine" aunoa he painga mahere kua whakaurua ki roto i te Managed WordPress. I ētahi atu mahere, ka rere tonu te kitenga, engari mā tō ringa anō e "quarantine". ## Anana Whakaraerae Ka rāraangihia e te kāri whakaraerae ngā take haumarutanga e mōhiotia ana i roto i tō WordPress core, ngā "theme", me ngā "plugin", e tirotirohia ana ia rā ki tētahi pātengi raraunga CVE. Ka whakaatu ia kitenga i tētahi "pill" taumata kino, te waehanga me tōna putanga, te tuhinga CVE mēnā he mea, te taitara, te putanga i whakatikaia ai, me te wā i kitea tuatahitia ai. Ka hunahia e tētahi pātene **Dismiss** he kitenga kua aromātaihia, kua whakaaetia e koe. Takahuritia **resolved** i runga o te upoko kāri kia kite i ngā take kua whakatikaina, me te rā i whakatikaina ai ia mea. Ko te rārangi **I whakatikaia i te** te wāhanga whaimana: ka whakaatu ia i te putanga tika hei whakahōu atu ki reira. Ko te nuinga o ngā kitenga ka katia mā te whakahōu i te waehanga. Tirohia [Ngā Whakahōu WordPress](https://support.kapsulehost.com/mi-nz/wordpress-updates). > **Note:** Ko te tirotiro whakaraerae he painga mahere kua whakaurua ki roto i te Managed WordPress. I ētahi atu mahere, ka whakakapia te kāri e tētahi papa e whakamārama ana i te āhuatanga, me tētahi hono ki te whakahōu ake. ## Whakamarutanga Riri-Mārō Takiuru Ka mātakitakina e tēnei kāri ngā ngana takiuru ki tō takiuru WordPress, ā, ka ārai i ngā pūtake e rahua tonu ana. Ko tētahi wāhitau e rima, neke atu rānei, ngā ngana i rahua i roto i te tekau meneti, ka āraihia aunoatia mō te haora kotahi. E rima ngā kaute e whakaatu ana i ngā wāhitau kua āraihia i tēnei wā, ngā wāhitau e mātakitakina ana engari kāore anō kia āraihia, te tapeke kua āraihia mai i te wā i tīmata anō ai te ratonga, te tapeke o ngā ngana i rahua, me ngā tono takiuru hou. Ka rāraangihia ngā wāhitau kua āraihia i tēnei wā kei raro iho. He mea noa ngā tau nui i konei, ā, ehara i te tohu he hē kei reira. Ka ngana tonutia ia paetukutuku WordPress tūmatanui. Ko te mea nui ko te pikinga o te kaute āraihanga, ko tōna tikanga kei te mahi te whakamarutanga. Ko te whakapakari takiuru he painga mahere kua whakaurua ki roto i te Managed WordPress. Ki te kore e wātea, kāore te kāri e puta. ## Tātari IP Whenua Ka whakaatu tētahi kāri whakarāpopoto mēnā kei te mahi te tātari whenua me te maha o ngā whenua e āraihia ana, e whakaaetia ana rānei. Pāwhiritia **Configure** hei whakatuwhera i te kōwhiringa whenua whānui. He tātari taratahi noa te tātari whenua, ehara i te rohe pūmau. Ko te hunga kei runga i te VPN ka kitea mai kei tētahi atu wāhi rātou. Kei [Te Āraitanga Whenua mō tētahi Paetukutuku](https://support.kapsulehost.com/mi-nz/site-geo-blocking) te aratohu whānui, tae atu ki te whakamarumaru haumaru e pā ana ki te aratau whakaae-anake. ## Whakamarutanga Hotlink Ka ārai te whakamarumaru hotlink i ētahi atu paetukutuku kei te whakauru tika i ō whakaahua me ō pāpāho, mea e kai ana i tō bandwidth hei whakaratonga i tā tētahi atu wharangi. Whakakātia mā te **Whakakā**. Ka mahi tonu ngā toronga tika, ngā pūwheturangi, me ō ake wharangi. Ka taea e koe te tāpiri rohe kua whakaaetia, kotahi i te wā, ina kua whakakāhia, mā te puka `example.com`, `*.example.com` rānei. Ka whakaaetia aunoatia ō ake rohe, nō reira ko te rārangi anake mō ngā paetukutuku hoa e whakauru pono ana i ō pāpāho. Tangohia tētahi urunga mā te ripeka iti e tū tahi ana. ## Rārangi Ārai IP Ka whakakāhoretia tino e te rārangi ārai ngā wāhitau motuhake, ngā awhe CIDR rānei. 1. Tāurutia tētahi wāhitau IP, awhe CIDR rānei. 2. Tāpiritia he take, mēnā e pai ana, kia mōhio ai tō anamata he aha i reira ai. 3. Pāwhiritia **Block**. Ka rāraangihia ia urunga me tōna take me tētahi ata para hei tango. Koinei te taputapu tino tika. Ina mōhio koe ko tēhea tonu te wāhitau e raru ana, āraihia ki konei, kaua e ārai i tōna whenua whānui. ## Whakapakaritanga PCI-DSS I ngā toa WooCommerce e whakahaeretia ana, ka whakaputaina e tētahi kāri anō he whakapakaritanga e anga ana ki te whaitake SAQ-A. Ka whakaatu i ngā tirohanga e whā me te mea e whakamahia ana, kāore rānei, ia mea: - Kua monoa te ētita kōnae WordPress. - Kua āraihia ngā whakarerekētanga kōnae mai i te mana whakahaere. - Kua whakaritea te SSL mō ngā wā takiuru mana whakahaere. - Kua āraihia te XML-RPC i te tūmau tukutuku. Ka whakakā a **Whakamahi i te katoa hardening** i aua mea, ā, ka whakahoki a **Tango hardening** i a rātou. > **Warning:** Ka ārai anō te monoa i ngā whakarerekētanga kōnae i te whakauru, te whakahōu rānei i ngā "plugin" me ngā "theme" mai i roto i te mana whakahaere WordPress. Koinā te take, engari ka panoni tēnei i tō āhua mahi. Whakamaheretia tō tukanga whakahōu i mua i tō whakamahi. Tirohia [Ngā Plugin WordPress](https://support.kapsulehost.com/mi-nz/wordpress-plugins). Ko te whakamahi i ēnei tautuhinga he hīkoi whaihua whakamua ki te PCI-DSS SAQ-A, ehara i te whakamanatanga. Ko tō rārangi utu whakaeke me ō ake tikanga mahi ngā mea e whakatau ana i tō whaitake tūturu. ## He Āhuatanga Mahi Tōtika - **Ia Wiki:** titiro poto ki te whakarāpopototanga whakamarutanga. Mahia he mahi anake mēnā kei te kōwhai tētahi "pill". - **Ina puta ana tētahi whakaraerae:** whakahōutia te waehanga kua tapaina ki te putanga e rāraangihia ana i raro i **I whakatikaia i te**. - **I mua i tētahi panoni mōrearea:** tangohia he tāpiri haumako. - **Ina puta ana tētahi whakatūpato tiwhikete:** tirohia mēnā kei te tohu tonu te DNS ki te paetukutuku, kātahi whakamahia **Whakahōutia ināianei**. - **Whai muri i tētahi whakapāngatanga whakapae:** whakahaerea he anana mōrearea ā-ringa, whakarerekētia ia kupuhipa, ā, whakahōutia ngā mea katoa. ## Ngā Wharangi e Hāngai Ana - [Te Tiaki Pupuri Whenga mō tētahi Paetukutuku](https://support.kapsulehost.com/mi-nz/site-password-protect) mō tētahi rohe urunga pono. - [Te Āraitanga Whenua mō tētahi Paetukutuku](https://support.kapsulehost.com/mi-nz/site-geo-blocking) mō te tātari ā-matawhenua. - [Te Whakamotuhēnga Rua-Wāhanga](https://support.kapsulehost.com/mi-nz/two-factor-authentication) mō tō ake pūkete KapsuleHost. - [Te Tango i tētahi Tāpiri Haumako](https://support.kapsulehost.com/mi-nz/taking-a-backup) i mua i tō panoni i tētahi mea i tēnei wharangi.