http://www.perlmonks.org?node_id=1077047


in reply to Security on shared server

I'm writing a web page that accepts a .csv which contains sensitive PII (personally identifiable information). The site it's going to be on is hosted on a shared server.

Don't do that. Seriously. It can only go wrong in the long term, and likely earlier.

Get a hosting provider that is certified to the standards you need to comply to.

Replies are listed 'Best First'.
Re^2: Security on shared server
by derekstucki (Sexton) on Mar 05, 2014 at 22:28 UTC
    This hosting service is PCI compliant/certified, which is the level of security we need, and probably this entire conversation is just an exercise in paranoia, but while I'm doing something, I might as well do it as well as possible.

      There's a wipe utility available on most linuxy operating systems (though not always installed by default), but the problem is that journaled file systems don't actually write changes to disk immediately, but rather to a separate journal on disk (which improves reliability in case of crashes). That makes wiping files unreliable, so you might just go ahead and simply delete them.