Wednesday, August 20, 2008 at 7:30 PM |  
A few small examples:

  1. Rename admin account
  2. Don't make configuration.php writeable
  3. Don't have any files and folders with 777 permissions (644 for files and 755 for folders should do)
  4. Keep Joomla! at it's latest version (especially if there was a security release)
  5. Keep extensions on the latest version
  6. Don't take a host that has the php setting register_globals = on
  7. All directories 755
  8. All files 644
  9. configuration.php 444
  10. Password protect the administrator directory (using your host accounts control panel..i.e: cPanel or by other means)
the recently discovered 1.5 exploit in 'reset.php' would likely not be successful if the administrator directory is password protected.


Posted by Java Labels:

0 comments:

Visit the Site
MARVEL and SPIDER-MAN: TM & 2007 Marvel Characters, Inc. Motion Picture © 2007 Columbia Pictures Industries, Inc. All Rights Reserved. 2007 Sony Pictures Digital Inc. All rights reserved. blogger template by blog forum