What is the threat? It depends on the hacker's goals. Maybe it's just an russian phone number list interest in hacking, maybe earnings by placing hidden links from the exchange, or maybe spam from your site. It is also possible that your site will infect your users with Trojans, which will not only give up their passwords, but will also become participants in DDoS in the future.
And it happens when a site is hacked for the sake of placing doorways, and you won’t even know that you have a forum where they offer to go to a partner site and enter an SMS in order to get the desired content. How does a website get hacked? There are actually a lot of ways. Let's look at the main ones.
SQL injection XSS attack Bruteforce Social engineering Trojan SQL injection for your website Let's first look at what SQL injection is. Let's translate the SQL language into something more understandable. I liked the explanation of one Habr user on this matter. Dad, leaving home, left a note for mom asking her to leave 100 rubles for Kolya.