All 6 important security checks and fixes:

• URL Canonicalization
• IP Canonicalization
• XSS Protection
• Block LIBWWW-PERL Access
• Disable Directory Browsing
• Disable Server Signature 

Buy all six as a bundle and SAVE!

Details About the Items in this Bundle

URL Canonicalization

Canonicalization describes how a site can use slightly different URLs for the same page - for example: both http://www.example.com and http://example.com display the same page but do not resolve to the same URL. If this happens, search engines may be unsure as to which URL is the correct one to index. In addition, these two different URLs have the same content. They would be considered to be duplicate content on your website which can hurt your search engine rankings. Duplicate content also splits the value of any inbound links if some links point to one version and some links point to the other. This decreases the relevance and influence of both pages. We will encode your site to resolve each page to only one URL.

IP Canonicalization

Canonicalization describes how a site can use slightly different URLs for the same page - for example: both 123.456.789.012 and http://example.com display the same page but do not resolve to the same URL. If this happens, search engines may be unsure as to which URL is the correct one to index. In addition, these two different URLs have the same content. They would be considered to be duplicate content on your website which can hurt your search engine rankings. Duplicate content also splits the value of any inbound links if some links point to one version and some links point to the other. This decreases the relevance and influence of both pages. We will encode your site to resolve each page to only one URL.

NOTE: This works best if your domain has a dedicated IP address rather than a shared IP address.

XSS Protection

Cross-site scripting (XSS) is a type of computer security vulnerability typically found in web applications. XSS enables attackers to inject client-side script into webpages viewed by other users. This security fix will block this access and make your site more secure.

Block LIBWWW-PERL Access

Block server access from User-agent Libwww-perl. Botnet scripts that automatically look for vulnerabilities in your software are sometimes identified as User-Agent libwww-perl. By blocking access from libwww-perl you can eliminate many simpler attacks. This could also save your bandwidth quota by blocking certain bots or spiders from crawling your website.

This security fix to your site can help to prevent an automated script from defacing your website. Such defacement, which could include the disabling of interactive functions on your site, could damage your credibility and cause you to lose business.

Disable Directory Browsing

We will check if your server allows directory browsing and disable it if it is currently enabled. If directory browsing is disabled, visitors will not be able to browse your directory by accessing the directory directly (if there is no index.html file). This will protect your files from being exposed to the public. Apache web server allows directory browsing by default. If directory browsing is enabled, ANY user can access your web directories/folders which contain all your files. This means any files that are uploaded to your server. Disabling directory browsing is generally a good idea from a security standpoint.

Disable Server Signature 

A variety of online tools are currently available that display the headers of any website. With the server signature turned on, it would be very easy for anyone - including hackers - to view the versions of your server software and other critical data. It is always better to reduce the public visibility of any critical data in order to reduce the chance of your website being hacked.

We will check if your server signature is on, and turn it off if it is on (if possible for your hosting server). Turning off your server signature is generally a good idea from a security standpoint.

NOTE: Some servers (i.e.nginx) do not allow this process unless the hosting account for the website is a VPN or Dedicated Server.