How do secure my web server

Please i need professional advise on how to secure my web server.

I have more than five websites running on it perfectly.

But, recently there have so many SQL injections in my databases and diverse attacks from hackers.

Thanks in advance.

 

That's a bit like asking how long is a piece of string.

There are a whole host of things needed to secure a web server. The precise details of which change depending on: whether you are hosting the pages on your own servers or having them hosted by someone else; the type of web server (usually IIS or Apache, but there are plenty of others); the server side coding language you are using; the client side coding; the type of database; were the database is in relation to the web server.

To be honest, a bulletin board isn't the place to answer such a broad open question. We are good add answering tight specific questions or solving particular problems. This isn't the right forum to teach you how to carry out such a multi-disciplined and diverse task.

Tell us whether you are hosting the servers yourself, the type of web and database servers, and which coding languages you are using and we may be able to point in the direction of some books or web resources that will help you.

 

I am hosting the server (srv2003), the database is SQL2003, coding lang is visual studio.

 

This will get you started on Windows 2003 server:

Windows Server 2003 Network Administration By Craig Hunt, Roberta Bragg

There isn't a 2003 version of SQL so I expect you meant SQL 2005 (the other obvious options being SQL 2000 or SQL 2008). This Microsoft set of guides is probably the best place to start:

http://www.microsoft.com/sql/technologies/security/demos.mspx

Visual studio is not a coding language. It is an integrated development environment. That is, it is an application that helps you write code and manage that code.

I would guess that if you are using Visual Studio you'll be using either C# or VB.Net. Both come under the general scheme of ASP.Net when used to write web pages. So as a general starting place, this is probably as good as any:

http://msdn.microsoft.com/en-us/library/aa302415.aspx