Advise on Webserver / Security

We already have an already running job site on a managed dedicated linux server (security included) - no root access - but ssh acces. With the user I have I can nearly do everything (modify cron, linux command line, etc.)

Now I am thinking about having a dedicated linux server with root access (not managed). What needs to be done to setup security on such a server.

On this server we will have a php/mysql site with wordpress ([url removed, login to view]) - there need to be some settings modified, that I cannot do with my non-root user.

What are the risks that I have and what can be done to reduce them effectively (like closing ports, etc.).

Can you write something down and then have a discussion on chat or icq for about 30 minutes up to an hour.

My technical background: I am graduated in computer science and have basic knowledge of PHP, MySQL, linux admin

## Deliverables

1) Complete and fully-functional working program(s) in executable form as well as complete source code of all work done.

2) Deliverables must be in ready-to-run condition, as follows (depending on the nature of the deliverables):

a) For web sites or other server-side deliverables intended to only ever exist in one place in the Buyer's environment--Deliverables must be installed by the Seller in ready-to-run condition in the Buyer's environment.

b) For all others including desktop software or software the buyer intends to distribute: A software installation package that will install the software in ready-to-run condition on the platform(s) specified in this bid request.

3) All deliverables will be considered "work made for hire" under U.S. Copyright law. Buyer will receive exclusive and complete copyrights to all work purchased. (No GPL, GNU, 3rd party components, etc. unless all copyright ramifications are explained AND AGREED TO by the buyer on the site per the coder's Seller Legal Agreement).

## Platform

linux

php

html

mysql

Seguridad informática Ingeniería Linux MySQL PHP Arquitectura de software Verificación de software Seguridad web

Nº del proyecto: #3078110

Sobre el proyecto