This update will both add strong validation to limit spam messages and also block SQL injection attacks. The updated code will validate the message submitted by a spam-bot or user when:

• first name and last name are identical
• a hidden field has been filled out by a spam robot (called a honeypot validation)
• check if IP Address has a valid format
• check if IP Address is blacklisted (setting in new CMS)
• check if email domain name (everything after the @ sign) is blacklisted (setting in new CMS)
• check if email address is blacklisted (setting in new CMS)
• an attempt is being made to perform a SQL injection attack

All the above validation happens automatically when the form is filled out by a spam robot (software program) or a user. The form validation code will detect the spam attempt and forward the spammer to the Thank You page without saving or forwarding the actual message to you.

An SQL injection is a web-based code injection attack where hackers use malicious code to bypass security systems and gain access to databases. This can allow attackers to conduct a wide range of activities, from extracting information to amending or adding new data or even, in some cases, accessing a server's operating system.

Your password will now be saved in the database using very strong encryption. As part of the updated security for login to the CMS, you will be required to use your email address as your username.

When you create a new password, the following rules will now be in effect:

• The password must be at least 8 characters in length
• The password must include at least one upper case letter
• The password must include at least one number
• The password must include at least one special character

Because an email address must be a specific format to be valid, this will allow for better validation of the login username.

Since the new password encryption update will no longer allow me to extract the password for you manually, this new feature will enable you to request a new password yourself should you have forgotten it. You will be required to enter the email address you use as your username, and a new password will be emailed to you.

You can still change your password as often as you like in the CMS.

SSL (Secure Sockets Layer) and its successor, TLS (Transport Layer Security), are protocols for establishing authenticated and encrypted links between networked computers.

Making your website use a secure connection, your website address will now start with https to indicate the stronger security. This will work automatically, even if people have bookmarked your existing website address. The shift to SSL/TLS (from http to https) is automatic, will not reduce your website's performance, and is transparent to users.

Please note that I can only offer this SSL/TLS update if you have your website hosted with me (or have your website hosted with A2Hosting). If you have your website hosted with another hosting company, there might be a fee for the SSL/TLS update.

By updating the framework (called Bootstrap), your website will use the latest javascript files ensuring both optimal security and performance.

As part of my ongoing hosting service and maintenance, your website hosting will have the coding language (PHP) and all necessary code modules updated to the latest versions to ensure optimal security and performance.

Included in the CMS update is all the security and validation settings mentioned in the More robust validation for the Contact form section.

Please view the video at the bottom of this page for a walk-through of the latest CMS.

This can be color updates, content sections, fresh images, add or remove features (for example add a video section) or add or remove pages.

Certain restrictions apply

Your price: $500

Please send your check to the following address:

• StoneHill Media, Inc.
• 2902 Burton Dr
• Gilbertsville, PA 19525

Once I receive your payment, I'll email you to let you know an approximate date of completion. I'll also need to know what updates you want me to complete for the website (if any), as you have an allowance of 4 hours as part of the update package.

If you have any questions, please ask. If we need to get on a video call to go over what changes you want me to implement as part of your 4-hour design/feature allowance, please go ahead and request that.