Administrator
- Join Date:
- Feb 2006
- Location:
- Tampa Bay, Florida
- Posts:
- 10,682
- Plugin Contributions:
- 56
Using FTP (vs. SFTP or FTPS)
ACTUAL language used by a hoster in an email received today:
"You can connect via port 21 however with standard FTP. If for some reason port 990 and a secure FTP connection is required we do have server options for PCI compliance if necessary."
Uh, yeah, "some reason" is I don't want the client to get hacked.
Better advice:
Quoting from: https://www.zen-cart.com/content.php?115-how-can-i-protect-my-site-from-malicious-attack-plus-security-recommendations
Accessing Your Site Files Securely
Instead of using regular FTP to access your server's files, it would be wise (if your hosting company offers FTPS support) to use a program that offers FTP over SSL/TLS. This method will encrypt the information you transmit and receive. This is important especially when you are downloading database backups or configuration files which contain usernames and passwords, etc.
If your hosting company does not offer SFTP or FTPS, then they are most likely not PCI Compliant either, and you should be choosing a different hosting company who takes security seriously.
