Web Site Security for Catalogers

Moreover, if your Web site has a database behind it (and most do) the risk is even greater. Less-than-perfect coding exposes you to possible SQL injection attacks described below. Your seemingly simple site likely isn’t. Again, this increases your risk.

3. We’ve outsourced our site’s applications and hosting, and the vendor has this problem covered. When outsourcing, you still bear responsibility for ensuring your outsourcing partner follows security best practices. (Some are described below.) Know what questions to ask, and make sure you like the answers. The responsibility for security ultimately is yours.