Overview
-
PHP Containerisation: Enhance isolates each user's website in a separate PHP container, ensuring that processes within a website can’t access files outside its own container. This isolation protects against cross-site infections within the same subscription. SSH and cron jobs also run inside the same container. However, it doesn't protect against vulnerabilities in the website's code, so CMS software and plugins should be kept up-to-date.
-
Role Containerisation: All roles, including email system components, are containerized on Enhance. These containers cannot access website files, even when the application role is on the same server.
-
User/Permission Access: Enhance runs all operations (e.g., WordPress tasks) under the website's user account, not as root, ensuring security by limiting permissions.
