Web hosting security

When possible, your production sites running ProcessWire (or any CMS) should ideally be in a dedicated environment. This doesn't necessarily mean a dedicated server…

Rather, it means any environment where the file system is dedicated only to your website(s). Meaning, there aren't other users on the same server that can potentially see (or worse, modify) the files of your account(s) on the same server.

This dedicated environment could be a dedicated server, VPS, cloud server, or even shared hosting where accounts are completely jailed from one another. If in doubt, inquire with your web host about whether or not your environment is dedicated and/or completely jailed from other people. Typically, the budget hosting accounts are not dedicated environments, so be careful and choose wisely.

When in a dedicated environment, you have less to consider in terms of file security, and this is one of the main reasons why we recommend it. File permissions are not as great of a concern because there is not the possibility of other users on the same server getting into your files, regardless of your file permission settings. That doesn't mean that you can disregard file permissions as a security matter, but a dedicated environment does greatly reduce the odds of having uninvited guests shopping around in your files.

Twitter updates

  • We added WebP image support this year and many have been adopting it in existing projects. We look at a process used for migrating existing websites to WebP images— from preliminary considerations to implementation & testing, w/lots of tips & tricks too: More
    16 August 2019
  • Core version 3.0.137 on the dev branch adds the ability to hook multiple methods at once, in a single call. This post details how it works and provides a useful example of how you might put it to use in your development environment— More
    2 August 2019
  • ProcessWire 3.0.136 updates our CKEditor version and adds a new backtrace() method to the core Debug class— More
    26 July 2019

Latest news

  • ProcessWire Weekly #274
    The 274th issue of ProcessWire Weekly introduces three new modules, covers the latest status update from Ryan, and features the newly released website of the Brightline Initiative. Read on!
    Weekly.pw / 10 August 2019
  • WebP images on an existing site
    In this post we’ll look at a process used for migrating an existing website to use WebP images. We’ll cover everything from preliminary considerations to implementation and testing, with lots of tips and tricks along the way.
    Blog / 16 August 2019
  • Subscribe to weekly ProcessWire news

“…building with ProcessWire was a breeze, I really love all the flexibility the system provides. I can’t imagine using any other CMS in the future.” —Thomas Aull