How we can secure our Joomla site from outsider user.
Is there is any security feature is available in Joomla to prevent it hacking from outsider user.
Asked
Active
Viewed 153 times
1
-
2Do not upload it if you want to prevent it from hacking. – swapnesh Jun 29 '12 at 06:32
-
@swapnesh Prevention is better than cure....!!! – Pramod Kumar Sharma Jun 29 '12 at 06:37
-
If you still use joomla 1.x upgrade to v2. – CodesInChaos Jun 29 '12 at 07:07
-
1honestly, who still uses Joomla 1.x ? – Lodder Jun 29 '12 at 08:55
-
sadly lots of people still on 1.0 - usually with heavily customised code... – Craig Jul 02 '12 at 00:32
4 Answers
2
Use this following steps :
Change the default database prefix (jos_)
Use a SEF component
Use the correct CHMOD for each folder and file.
Password protect your administrative area.
Keep your website up-to-date.
Use a .htaccess file to secure your Joomla.
Passwords - Use a unique and strong password.
Install the jSecure Authentication plugin.
user2863258
- 21
- 3
1
Have a look at phpids.org As an intrusion detection system, It mitigates web bases attacks.
HamZa
- 14,671
- 11
- 54
- 75
Ben Poulson
- 3,368
- 2
- 17
- 26
1
- All sites can be hacked, the best you can do is be pro-active against that day.
- Read the Joomla! doc's on Security
- The most effective exploits have been through
/administratorso, put/administratorunder it's own authrealm and only provide that password to trusted users. (Then change it every time a/administratorusers leaves.) - Use JSecure with a changing token.
- Run a content monitoring system in conjunction with a continuous back system so you can minimise downtime if/when you do get hacked (that way you're notified of the problem quick and can restore quickly to a working state). (You may want to investigate Akeeba for automated backups)
- Don't use obvious names for Administrator or Super Admin accounts (e.g. admin/superadmin/root etc) and disable the original admin account from when the site was setup.
- As mentioned in Joomla's doc's keep your site up-to-date with both the installed Joomla! version and any third-party extensions (especially keep an eye on the Vulnerable Extensions list)
Craig
- 9,335
- 2
- 34
- 38
1
I believe I answered this question here. Might come in handy for you too
