Vesta Control Panel - Forum

I had a small cluster of websites, about 10 on my VPS on the default "admin" account.

One of my clients uploaded a plugin through wordpress with malicious code on it and it spread to all other websites on the user account.

In the future, if I created each website with it's own user on a single VPS, does Vesta automatically create jails or containers to isolate each website and prevent the spread of malicious code to the other sites?

1) Create user per site
2) Read about open_basedir
3) Use mod_fcgid or php-fpm to run php process as user
4) Use maldet + mod_security for prevention