Can I remove the FTP details in Configuration Page?

Discussion regarding Joomla! 1.5 security issues.
Joomla! Vulnerable Extensions: http://feeds.joomla.org/JoomlaSecurityV ... Extensions

Moderator: General Support Moderators

Forum rules
Forum Rules
Absolute Beginner's Guide to Joomla! <-- please read before posting, this means YOU.
Security Checklist
Forum Post Assistant - If you are serious about wanting help, you will use this tool to help you post.
Locked
User avatar
Ishana
Joomla! Apprentice
Joomla! Apprentice
Posts: 20
Joined: Mon Sep 10, 2007 4:14 am
Location: Omaha, Nebraska, USA
Contact:

Can I remove the FTP details in Configuration Page?

Post by Ishana » Sun Dec 28, 2008 5:32 pm

I am new to Joomla 1.5 and did not have this question in Joomla 1.0.15.

I have a few questions please...

Question 1:
Why is there FTP user name and password in the configuration page?

Question 2:
Can I remove the User Name and Password from this page?

Question 3:
What is the strongest thing I can do to avoid being hacked?

thanks
IA

Amin7b5
Joomla! Intern
Joomla! Intern
Posts: 62
Joined: Fri Jul 11, 2008 2:13 am

Re: Can I remove the FTP details in Configuration Page?

Post by Amin7b5 » Mon Dec 29, 2008 5:26 am

Question 1: Why is there FTP user name and password in the configuration page?
Answer: Likely because it was entered during installation or placed in the configuration.php

Question 2: Can I remove the User Name and Password from this page?
Answer: Yes, as long as you are not going to use the FTP layer in Joomla.

Question 3: What is the strongest thing I can do to avoid being hacked?
Answer: Start here: http://docs.joomla.org/Category:Security_Checklist


Locked

Return to “Security in Joomla! 1.5”