With root access, an intruder has the freedom to move about the computer system at will to copy, change, view or delete any files at whim. A popular target is electronic mail messages. The intruders don't have to be outsiders. The majority of computer break-ins companies suffer are at the hands of a disgruntled present or former employee. That means a large key to keeping Web sites safe is to keep Webmasters and other employees happy.
Some sites see preventing log-ons from the Internet as the only solution to eliminate attacks.
Although this is effective, it frustrates users and negates many of the commercial benefits of operating a Web site, such as allowing persons paying a monthly fee to gain access. Providing adequate log-on security and protecting passwords is not enough to protect a Web site. Internet server software is quite complex and may contain faulty scripts and software termites, which may unintentionally create gaping security holes. Hackers find the holes by bombing a site with automated queries that either provide access to a site or crash the site. Outdated programs used to provide access to features of a Web site can also be mined by hackers for weaknesses.