Security steps for website

[peslis]

Hello 000webhost community iam a begginer web developer and i would like you to take me through all the steps for securing my website (https) and data roaming through it like profiles ,login/register data , conversations between users …etc ,basically the whole session of a user .Currently i have 0 security , all the passwords are sent to my database in plain text . (Dont worry its in a testing state)

Point me links where i can find info about all these ,i am a good reader

[akhilkumar332]

@peslis If you have a custom domain and want to use “(SSL)https”, then check this tutorial,

How To Use Cloudflare For SSL

By default, 000webhost provides a secure connection for all 000webhostapp.com subdomains. However, for custom domains, this is not the case. But with this method, you can setup your custom domain with a secure HTTPS connection for free. First, sign up for an account at 000webhost.com if you don’t already have one. [download77] Then, create a site, picking a name and a password. [2] Now, create a Cloudflare account at https://dash.cloudflare.com/sign-up [3] Next, click the blue button that…

Check tutorial sections for more different tutorials.
https://www.000webhost.com/forum/c/tutorials

[ckhawand]

If you want to hash your passwords, use this

hash('sha256',$password);

[peslis]

ok for passwords but all the other things are included in the ssl?

[ckhawand]

Yeah, should be