I totally agree with you. Security is the no. 1 concern before we start a public launch. The issues you mentioned is very basic that should be avoided in the f

I totally agree with you. Security is the no. 1 concern before we start a public launch. The issues you mentioned is very basic that should be avoided in the first place. VPS should be well maintained by the owner himself or have professional service to help. For a better architecture, a web server should be separated from the app server and database server, because the HTTP port is always open on the firewall, while the rest can only be accessed locally. I have a blog page showing step by step how to configure application development environment on Windows and deployment environment on Linux. Maybe it's helpful. http://bingobo.info/blog/contents/how-to-configure-application-development-environment-on-windows.jsp http://bingobo.info/blog/contents/how-to-configure-applicati...