So far we have reviewed a lot of hosting providers, Hetzner’s German servers included, and unfortunately most of them never disable the dangerous PHP functions — which is exactly what causes so many security problems on the site and the server.
Leaving those dangerous PHP functions enabled means an attacker can reach parts of the server’s source files and pull out some of the server’s important information.
Companies install a firewall, apply a few security settings, and then assume that access to these files is no longer possible.
And site owners think installing one security plugin will solve these problems — yet not long ago, people running Elementor 3 or lower caught a virus even with a security plugin installed.
But the story is not limited to PHP. Some companies run Python and Node.js enabled on the same hosting at the same time, and those accounts are far less secure, because server source files can be reached through those languages too. If you are planning to buy hosting for WordPress,
try to buy a plan that does not carry these extra features, because they are of no use to you anyway.
Omid Bodagh
I am an SEO specialist who likes helping businesses get seen on Google. From WordPress to SEO, whatever an online business needs to grow, I can help with it.
