Hacked: Investigating an Intrusion on My Server
This article was absolutely painful to read. Let me try a different ending:<p>&gt; Conclusion:<p>1. Ensure the files that php is running are not  writable by the same process. Different app -&gt; different user.<p>2. Unless you&#x27;re planning to send emails from the server, firewall output on those ports. If you do plan to, firewall everything apart from that server (you can setup alerts when DNS changes, it&#x27;s not going to happen often for email hosts)<p>3. Disable most unnecessary functions and modules. Anything touching eval, str_rot13, exec, and many others should be killed right away.<p>4. Enable basedir.<p>5. If you can&#x27;t handle regular system updates, don&#x27;t run your own server. If you can&#x27;t handle wordpress updates, host it with someone else.<p>6. Wherever you host, make sure your app can be easily redeployed. You can&#x27;t rely on dates to see when anything changed.<p>7. If you can&#x27;t handle system upgrades, don&#x27;t think that docker or any software is going to solve any of your problems.