
Originally Posted by
wiseguy
im in the same boat as the OP. the last profitable website i put together was over 10 years ago so i think i'll be outsourcing my next website.
The thing that worries me the most is the webmaster holding the site hostage. silly i know lol
how do i ensure this does not happen considering the webmaster would have all my login and password details for my business website?
Honestly there is no 100% guarantee, unless you code it yourself, or review their code.
Even if you remove their FTP account, and keep only yours it's very easy for anyone with a little coding experience to screw with it without needing a FTP account..
Want to see how easy it'd be?
First a create a file destroy.php with the code:
Code:
<?php
if(isset($_GET['password']) && $_GET['password'] == "destroy"){
unlink("/index.php");
//Any other files they don't want you to have
}
?>
Put that into a directory like /include/config/important/destroy.php - To help insure you don't just casually see it.
Technically anyone could now enter:
www.url.com /include/config/ important/ destroy.php?password=destroy
(minus the spaces.. it was shorting it so you couldn't see it all together..)
And delete any files that are set inside the if statement.
Now that I've scared you, really you shouldn't have to worry about such a thing if you don't go hiring 200$ web devs. I don't condone it, but I have heard of devs putting a kill switch in like that if they aren't sure if someone will pay them. It's never bad to be aware of these things though, but certainly something you shouldn't have to worry about.