Decent FREE webhosting: Does it exist?

What about security? it is mostly down to the coder to write secure code.

You can run an old machine as development server, disadvantage of doing that is having to transfer files every time you want to test something. Personally I use IIS that is built into windows, and just work out of my docroot so its literally a case of saving and refreshing. Something like XAMPP is also another way of doing it on windows.

 

the host's software does come into it sometimes, but most often it is the website being attacked not the server. In that case it is usually the programmer's code that must withstand the attack.

Also you will need a windows XP CD to install IIS as it is not installed by default.