[Security tips inside] How to check if the server is hacked?

[kanhu]

I want to bring an old topic to light again which give a brief on the security risk for the apps installed on the subpaths.

Security about possibility to install under subfolder

Ok, let’s imagine a user that has a domain: example.org he has 3 application like WordPress, piwik, ownCloud installed in path like /blog, /stats and /cloud When he logs in as an admin on each app, a cookie is stored inside his browser. The security policies of browsers make that the app have access to all the cookies stored for the domain. Now let’s imagine WordPress had been compromised. The attacker has control of the WordPress of the user. It means he can gather all cookies of the user for…

So is installing the apps on sub-paths bad practice ?