# Website Security Guides for Site Owners

> Website security guides: hacked WordPress and PrestaShop sites, online stores and payments, Google warnings, backups, updates and AI bots. Step by step.

URL: https://webintacta.com/en/guides
Language: English (Spanish version: see the hreflang alternate of the HTML page)


- [How to tell if your WordPress site is hacked](https://webintacta.com/en/guides/how-to-tell-if-wordpress-is-hacked): Ten signs your WordPress site is hacked, why the owner almost never sees them and how to check each one, with WP-CLI commands if you use the command line.
- [My website redirects to another site: what's going on](https://webintacta.com/en/guides/website-redirects-to-another-site): Why your website redirects visitors to spam or gambling sites but never you, how to reproduce it with curl and where to look: .htaccess, database, JavaScript.
- [How to remove Google's “dangerous site” warning, step by step](https://webintacta.com/en/guides/google-says-site-is-dangerous): “This site may be hacked”, “Deceptive site ahead” or a malware warning: what each Google warning means and how to remove it in Search Console, step by step.
- [PrestaShop store hacked: what to do in the first hour](https://webintacta.com/en/guides/prestashop-hacked-what-to-do): What to do if your PrestaShop store is hacked: stop the skimmer, commands to find modified files, check ps_configuration and hooks, real CVEs and the GDPR.
- [My website was hacked: how to recover it step by step](https://webintacta.com/en/guides/recover-hacked-website): My website was hacked, what do I do? The first hour, what to save before cleaning, passwords, backups, the Google review and when to get help.
- [How to tell if your website is hacked or has malware](https://webintacta.com/en/guides/how-to-tell-if-website-is-hacked): How to tell if your website is hacked or has malware, whatever the CMS: signs for visitors, in Google and in email, plus free checks you can run today.
- [Upgrading PrestaShop (1.7 → 8 → 9) without breaking the store](https://webintacta.com/en/guides/upgrade-prestashop): How to upgrade PrestaShop from 1.7 to 8 and from 8 to 9: PHP per version, modules and overrides, Update Assistant or manual, staging and a rollback plan.
- [Wordfence, Sucuri or Solid Security: which to choose (and when it isn't enough)](https://webintacta.com/en/guides/best-wordpress-security-plugin): Wordfence vs Sucuri, Solid Security (Kadence Security), MalCare and Jetpack: what each does free and paid, which to choose and what none of them does.
- [Vulnerable PrestaShop modules: known CVEs and fixed versions](https://webintacta.com/en/guides/vulnerable-prestashop-modules): List of vulnerable PrestaShop modules: CVEs, affected and fixed versions, core security advisories and a step-by-step security audit of your own store.
- [Credit card skimmer on your website: how to detect it](https://webintacta.com/en/guides/credit-card-skimming-online-store): How credit card skimmers work on WooCommerce and PrestaShop checkouts, where they hide, why owners miss them and what to do if you suspect one.
- [Data breach in your online store: what to do in 72 hours](https://webintacta.com/en/guides/online-store-data-breach-gdpr): Customer data stolen from your online store? When to notify under GDPR Articles 33 and 34, what to tell customers and the technical report you need.
- [How much does website maintenance cost in 2026?](https://webintacta.com/en/guides/website-maintenance-cost): How much website maintenance costs in 2026: typical monthly ranges for small business sites and stores, WordPress pricing, what raises the fee and what to ask.
- [llms.txt: what it is, what it's for and how to check yours](https://webintacta.com/en/guides/llms-txt): What llms.txt is, how it differs from robots.txt, how to write it on WordPress, PrestaShop or Shopify, and which AI bots to block in robots.txt or let in.
- [HTTP security headers: what they are and how to check them](https://webintacta.com/en/guides/http-security-headers): What HSTS, Content Security Policy, X-Frame-Options, nosniff, Referrer-Policy and Permissions-Policy do, how to add them and run a security headers check.
- [How to back up WordPress (and restore it)](https://webintacta.com/en/guides/wordpress-backup): How to back up WordPress with a plugin, from your hosting or with WP-CLI, where to store it, how to restore it and what to do if your backups are infected.
- [Website says “Not secure” in Chrome: causes and how to fix it](https://webintacta.com/en/guides/chrome-not-secure-warning): Why Chrome says your website is not secure (no HTTPS, expired certificate, mixed content) and how to check and fix it on WordPress and PrestaShop.
- [My domain is blacklisted: how to get it removed](https://webintacta.com/en/guides/domain-blacklisted): How to check if your domain is blacklisted (Google Safe Browsing, Spamhaus and others), why it happens, how to request removal and how to protect your email.
- [WooCommerce fake orders: how to stop card testing attacks](https://webintacta.com/en/guides/woocommerce-fake-orders): How to spot a card testing attack on WooCommerce, what it risks with Stripe or your bank, and how to stop it: rate limiting, CAPTCHA and payment settings.
- [Japanese keyword hack on WordPress: how to remove it from Google](https://webintacta.com/en/guides/japanese-keyword-hack): How to spot the Japanese keyword hack on WordPress, clean it from your site and from Google with Search Console (removals, sitemap, review) and keep it away.
- [SPF, DKIM and DMARC: how to set them up, step by step](https://webintacta.com/en/guides/spf-dkim-dmarc): What SPF, DKIM and DMARC do, how to check yours, how to set them up step by step, and how to go from p=none to p=reject without losing legitimate email.
- [Shopify security: what Shopify doesn't protect for you](https://webintacta.com/en/guides/shopify-security): Shopify store security: staff accounts and 2FA, apps and their permissions, theme code, third-party scripts and pixels. What to check and how to do it.
- [My website was hacked: is the web host, the agency or me responsible?](https://webintacta.com/en/guides/who-is-liable-hacked-website): Who is responsible when your website or store is hacked: you, your web host or your agency. What the GDPR says, what to check in contracts and what to ask.
- [Is it safe to stay on PrestaShop 1.7 in 2026?](https://webintacta.com/en/guides/is-prestashop-1-7-still-safe): PrestaShop 1.7 in 2026: since when it gets no patches, which published flaws affect it, the PHP 7.4 problem and what to do if your store is still on 1.7.
- [PHP2Shell (CVE-2026-109618 and CVE-2026-109619): what it is and how to tell if your website is affected](https://webintacta.com/en/guides/php2shell-vulnerability): PHP2Shell (CVE-2026-109618 and CVE-2026-109619): affected versions, how to check yours and what to do if you can't update PHP on an older website.
- [Vulnerable WordPress plugins: how to check yours for security flaws](https://webintacta.com/en/guides/vulnerable-wordpress-plugins): How to check your WordPress plugins and themes for published vulnerabilities, why an updated site still gets hacked, and what to do with a plugin with no fix.
- [WordPress brute-force attacks: wp-login.php, xmlrpc.php and how to stop them](https://webintacta.com/en/guides/wordpress-brute-force-xmlrpc): What brute-force attacks on wp-login.php and xmlrpc.php are, how to spot them in your logs, when to disable XML-RPC and how to protect logins with 2FA.
- [Exposed files on your website: .env, .git, backups and logs](https://webintacta.com/en/guides/exposed-files-website): Which files on your website anyone can download (.env, .git, .sql backups, debug.log or PrestaShop var/logs), how to check for them and how to block them.
- [ps_facetedsearch (CVE-2026-54159): how to tell if your PrestaShop store is affected](https://webintacta.com/en/guides/ps-facetedsearch-vulnerability): CVE-2026-54159 in ps_facetedsearch, PrestaShop's faceted search filters: affected versions, how to check yours, what to update to, and what to do on 1.7.