Skip to main content
gamedev.net
🔒 Locked

programmers and web hosting

Started by CProgrammer Apr 19, 2004 at 5:43 AM 8 replies 400+ views
Original Post
CProgrammer
CProgrammer
I just finished my website. It is written completely in php. It seems however that finding a descent provider is difficult for programmers. When you think you found one that allows php, java applets, mySql... you realize that they can kick you off the server when they believe your site uses to many system resources or the likes. Finally I''ve come to the conclusion that dedicated servers are the only option. Say I have a computer with apache or IIS. What do I still have to do to get the website with the domain www.mydomain.com running. It should also have a descent speed and bandwidth support, so what type of internet provider would i need.(im in germany). -CProgrammer
jbadams
jbadams
You''ll need to register yourdomain.com (or whatever its going to be), and get DNS set up for it. You''ll also need php installed on your server computer, as well as a database program of some description (mySQL should suit you just fine).

As for internet connection, it really depends on what kind of traffic your site is going to be getting. I''m not sure about Germany, but I''m fairly sure broadband connections are quite affordable there, and for some sites, a simple cable or dsl connection would be suitable, although it is likely you''ll want something a bit faster.
- Jason Astle-Adams
cgoat
cgoat
The connection for your site is what will cost you. Your average residential broadband provider won''t allow you to run a webserver, and usually have a clause in your contract that allows them to cancel your account or block traffic to your site if they find out (that way they can force you to upgrade to a more expensive account, same as a website host will).

Either way you''re screwed if your site starts to generate a lot of traffic.

Although things may be different in Germany.
ChaoticCanuck
ChaoticCanuck
And to add another note of warning, if you are just asking this, and you do not have a production capable server ready for testing you may want to re-evaluate placing your site online.

Have you considered the security implications of your code? Do you know how to set up an appropriate level of security on your server?

Run through the OWASP top ten and look how each component will affect your site; if you missed anything in any area examine the whole application.

Otherwise someone less ethical than me may find their way into your server.

Have a nice day.
CProgrammer
CProgrammer
I see this is gonna cost me.

ChaoticCanuck: Yes the security issue. Well my site is completely written in php and i''ll admit that I don''t have too much experience on the security part. Maybe someones got a link to a good site on php and security.
Although even if the security isnt 100% will it mater so much if the site is on a computer with nothing but the website. I mean in the worst case ill have to format. Nuisance, but in time i''ll get more experience in the mater and the problems will come less and less.
-CProgrammer
Bagpuss
Bagpuss
Yes, unless your computer is stand alone you could lose whatever is on your other PC''s.

Also, are you backing up your website ? What happens if you get hit by something that takes 2 weeks for it to become aparent. In that time you will have backed it up over most if not all your different backups, and you could loose the lot.

What if you get used as a relay by someone for sending a shedload of spam. You''ll get a load of email abuse, and you''ll certainly be noticed then by your isp that you are running a server.

Also, is your isp using dynamic IP addressing, where every X hours they disconnect you and you have to log in, when you could get a new ip. That can kinda screw your DNS up. (There is software to get round this, but I can''t remember it''s name.)

Good luck if you go for it, it will certainly be intersting, but make sure you have a good backup strategy in place !

(i.e. use 14 Monday .. Sat of week 1 use disks 1 - 6. Sun use Disk 7. Mon to sat of week 2 use disks 1 - 6 again (incremental backups), Sun use Disk 8, Mon - Sat Week 3, you get the idea I am sure.

That way you lose (in theory) a max of 6 days worth of work (assuming you have a DB that needs to be backed up). And make sure you AV scan your backup disks, and keep pathces current on your server.

HtH,

Bp
ChaoticCanuck
ChaoticCanuck
quote:
Original post by CProgrammer
I see this is gonna cost me.

ChaoticCanuck: Yes the security issue. Well my site is completely written in php and i'll admit that I don't have too much experience on the security part. Maybe someones got a link to a good site on php and security.
Although even if the security isnt 100% will it mater so much if the site is on a computer with nothing but the website. I mean in the worst case ill have to format. Nuisance, but in time i'll get more experience in the mater and the problems will come less and less.
-CProgrammer


As I said in my previous post, check out the OWASP top ten. If you read and fully understand the implications of those flaws, and your application is not vulnerable to them then you have a good start.

note: I also just updated my email address in my profile. Feel free to email me if you have any questions about security, just respect that I am extremely busy when at the office and it may take awhile to respond.



[edited by - ChaoticCanuck on April 20, 2004 9:40:25 AM]
CProgrammer
CProgrammer
Bagpuss: I see your point. I suppose looking at it that way the whole thing isnt only my problem but does contribute to an instable web in general(ie. spam).
I also see the stress. I winder if its really worth that.
Due to those factors i've decided to first get my php code as secure as posible. Then i'll find out how much it will cost me to have an official dedicated server with my internet provider.
Perhaps I can share this server with others and thus share the costs.

ChaoticCanuck: Thanks a bunch for the help, i'll be looking into the OWASP. And thanks for the email offer.
I probably wont get around to fixing the code at the moment(work) but maybe i'll come back to this.

-CProgrammer

[edited by - CProgrammer on April 20, 2004 10:55:20 AM]
davedx
davedx
www.dyndns.org

Probably worth using that till you''re stable and ready to go with a top level domain name.

Topic Locked

This topic has been locked by a moderator. New replies are not allowed.

Sign in to reply to this topic.