securing my site

[oisin]

HI Guys and girls
I have been charged with securing a site where people reveal their deepest darkest secrets but I don't know where to start except that I am not talking about some java script thingy that anyone can find and break. How do I make it truly secure???

[mairving]

What are you trying to secure, a database or just Web pages?

[dead_eye]

Most web servers allow you to set directories as password protected.

[oisin]

Problem I have is that I need to secure a database of users and whatever messages or information they choose to post on the site. The site also needs to be difficult to find and cannot under any circumstances be broken into. Psychology students will be using it to consult each other and work on the inner selves. So It must be as secure as possible.

[mairving]

You might give us a little more information.

What kind of webserver and database is it running?

Difficult to find as in a search engine not finding it? There are plenty of ways to do this. Use frames, have some hidden text, no page titles, little information on the home page and password protected directories.

Will the other students be looking at anything besides what they have posted?
I suppose that you could have private directories for each student and a public area for all students.

You can make it hard to break into but not impossible. The weakest link in this is always the passwords. They tend to be too simple and easily guessed or shared.