Fix Strapi/Next.js Hosting Issue
Budget: ₹1,000 – ₹4,000 INR
My production-ready Next.js site, powered by a Strapi CMS, is already on a Hostinger VPS with the domain correctly routed. The problem: Hostinger keeps disabling the service, flagging an “unauthorized script” and hinting at a potential crypto-miner.
Here’s what I know so far:
• I reviewed the server logs myself and the only recurring warning is “Unauthorized script detected.”
• After spotting it, I removed the suspicious files, yet the suspension returns on every redeploy.
I now need a deeper audit and a clean, stable deployment. Concretely, I want you to:
1. Inspect the VPS and project files to pinpoint what keeps triggering Hostinger’s malware scanner.
2. Eliminate or secure any lingering vulnerability without breaking the Strapi–Next.js integration.
3. Re-deploy the application so it runs continuously in production, free from further security flags.
4. Provide a short write-up of what you fixed and any hardening steps I should keep in place.
Everything else—domain, SSL, environment variables, and build scripts—is already configured. I just need this final stability hurdle cleared so the site can stay live without interruption.
Here’s what I know so far:
• I reviewed the server logs myself and the only recurring warning is “Unauthorized script detected.”
• After spotting it, I removed the suspicious files, yet the suspension returns on every redeploy.
I now need a deeper audit and a clean, stable deployment. Concretely, I want you to:
1. Inspect the VPS and project files to pinpoint what keeps triggering Hostinger’s malware scanner.
2. Eliminate or secure any lingering vulnerability without breaking the Strapi–Next.js integration.
3. Re-deploy the application so it runs continuously in production, free from further security flags.
4. Provide a short write-up of what you fixed and any hardening steps I should keep in place.
Everything else—domain, SSL, environment variables, and build scripts—is already configured. I just need this final stability hurdle cleared so the site can stay live without interruption.