+- Sinisterly (https://sinister.ly)
+-- Forum: Design (https://sinister.ly/Forum-Design)
+--- Forum: Web Design (https://sinister.ly/Forum-Web-Design)
+--- Thread: How to protect your joomla website (/Thread-How-to-protect-your-joomla-website)
How to protect your joomla website - Yusadolat - 06-07-2014
Speaking of protecting Joomla... how can we prevent
kiddies and skilled "hackers" from breaking into
your Joomla installation?
At first make sure you follow these simple, but
important rules:
a)
Always keep Joomla up2date
b)
Always make sure you run the latest patched
versions of the extensions you used
c)
Make sure you choose strong passwords for all
logins
d)
Check your own website for vulnerabilities, you
now know how to do this
e)
Always check the webserver's log files for
potential hack attempts
f)
Secure your server if you host your Joomla
website on a VPS or even a dedicated server
g)
Create a list of all extensions you use and
try to monitor them. For example you can use
Google or security websites for staying
informed about the latest vulnerabilities.
Only use secure extensions.
Furthermore you can apply our secret weapon which
holds off like 90 percent of all script kiddie
and automated script attacks:
SEO!
Activate the SEO features, use SEF URLs and have
fun watching your webserver logfile
(use tail -f /var/log/apache2/access_log for this)
while automated mechanisms try to hack your website,
but fail because you hide your real URLs from them
Furthermore most tools and scanners are not able to
work with search engine friendly URLs (I have the same
problem with my self-written tools, too :\).
This might be a big surprise, but with these
measures you already gained a decent protection
level.
The last things to do would be to rename the Joomla
backend folder from "administrator" to may be
"admin_acp_1234567" in order to prevent kiddies
and scanners from finding your Joomla backend.
And, last but not least, protect the PHPMyAdmin
login (if you have any) with .htaccess files
(( You can't do this with the Joomla admin control
panel since some components need to have access to
administrator/components..)
RE: How to protect your joomla website - chmod - 06-07-2014
Dude format your posts properly this (and the last one) looks a mess
RE: How to protect your joomla website - Yusadolat - 06-07-2014
0wk thanks