what should be done for security?

Discussion regarding Joomla! 3.x security issues.

Moderators: mandville, General Support Moderators

Forum rules
Forum Rules
Absolute Beginner's Guide to Joomla! <-- please read before posting, this means YOU.
Forum Post Assistant / FPA - If you are serious about wanting help, you will use this tool to help you post.
Windows Defender SmartScreen Issues <-- please read this if using Windows 10.
Locked
User avatar
kiasati
Joomla! Enthusiast
Joomla! Enthusiast
Posts: 164
Joined: Thu May 26, 2016 6:08 am
Contact:

what should be done for security?

Post by kiasati » Thu May 26, 2016 8:38 am

hi

im new to joomla.
i wanna know what are the must-have security extentions for joomla?
what thing should be done to improve the security?

thank u

User avatar
AlexVega
Joomla! Hero
Joomla! Hero
Posts: 2711
Joined: Fri Aug 28, 2015 6:13 am
Location: México

Re: what should be done for security?

Post by AlexVega » Thu May 26, 2016 8:55 am

Hi there,

First of all, check this useful information:
https://docs.joomla.org/Security_Checklist/es

One of the many extensions you can use:
http://extensions.joomla.org/extensions ... adminexile

Here you have the main category for security in the extensions directory:
http://extensions.joomla.org/category/a ... e-security

Cheers.

User avatar
ribo
Joomla! Virtuoso
Joomla! Virtuoso
Posts: 3507
Joined: Sun Jan 03, 2010 8:47 pm
Contact:

Re: what should be done for security?

Post by ribo » Thu May 26, 2016 10:02 am

If you are not up to date in joomla, third party extensions, etc. nο one extension alone can help you to improve your security. Check here for more details https://docs.joomla.org/Security
chat room spontes : http://www.spontes.com

deep92
Joomla! Apprentice
Joomla! Apprentice
Posts: 7
Joined: Thu May 26, 2016 3:47 pm

Re: what should be done for security?

Post by deep92 » Thu May 26, 2016 10:11 pm

These are some must have security extensions for joomla-:
1.Admin Tools - For Security
2.Akeeba Backup - For Backup
3.RokPad - Content Editor
4.Advance Module Manager - Site Management
5.Xpert Content - Joomla Content Display
6.RokBooster - Increase Performance
7.JSN Power Admin - Site Management

Further you can keep in mind some points to secure your website-:
1. You should have an updated versions of joomla always.
2. Always keep you backup of data.
3. There should be a smart login id and password.
4. Remove bad bots or rename htaccess.txt to .htaccess
5. Use file permissions.
6. Use "SEF"(Search Engine friendly) and Joomla plugins.

sozzled
I've been banned!
Posts: 13639
Joined: Sun Jul 05, 2009 3:30 am
Location: Canberra, Australia

Re: what should be done for security?

Post by sozzled » Thu May 26, 2016 10:21 pm

kiasati wrote:... what are the must-have security extentions for Joomla?
Probably, the only "must have" extension for site security that I would recommend is Akeeba Backup—make sure you take backups regularly and that you know how to restore your website if it breaks.

Apart from that, read what Alex Vega wrote. There's a lot of very useful information in those guides. ;)

If your website is likely to become a target for nuisances (e.g. spambots, hack attempts, etc.), then consider implementing some additional counter-spam features such as a few I mentioned in http://forum.joomla.org/viewtopic.php?f ... 0#p3402045

User avatar
kiasati
Joomla! Enthusiast
Joomla! Enthusiast
Posts: 164
Joined: Thu May 26, 2016 6:08 am
Contact:

Re: what should be done for security?

Post by kiasati » Sat May 28, 2016 6:23 am

thank you all :)

is it ok to install both "admin tools" and "adminexile" ?

User avatar
leolam
Joomla! Master
Joomla! Master
Posts: 20652
Joined: Mon Aug 29, 2005 10:17 am
Location: Netherlands/ Germany/ S'pore/Bogor/ North America
Contact:

Re: what should be done for security?

Post by leolam » Sat May 28, 2016 5:22 pm

no need...AT is enough..... that does all needed (AdminExile is 'double')

Leo 8)
Joomla's #1 Professional Services Provider:
#Joomla Professional Support: https://gws-desk.com -
#Joomla Specialized Hosting Solutions: https://gws-host.com -

User avatar
DaveOzric
Joomla! Ace
Joomla! Ace
Posts: 1591
Joined: Sat May 22, 2010 10:29 pm
Contact:

Re: what should be done for security?

Post by DaveOzric » Mon May 30, 2016 3:20 pm

I second Leolam, Admin Tools installed and configured correctly is pretty solid. Obviously keeping the site up to date including 3rd party stuff is key.

Hosting is the last thing, crappy hosting will help hackers get in. Steer clear of the $2 a month places like Godaddy, etc. Pay for some real hosting. Trust me fixing a hack will cost you more in the long run so just pay the $12-15 a month for a good host.

User avatar
leolam
Joomla! Master
Joomla! Master
Posts: 20652
Joined: Mon Aug 29, 2005 10:17 am
Location: Netherlands/ Germany/ S'pore/Bogor/ North America
Contact:

Re: what should be done for security?

Post by leolam » Mon May 30, 2016 3:25 pm

DaveOzric wrote:Steer clear of the $2 a month places like Godaddy, etc. Pay for some real hosting. Trust me fixing a hack will cost you more in the long run so just pay the $12-15 a month for a good host.
Thanks Dave.... the best advise on 'Godaddy'

Leo 8)
Joomla's #1 Professional Services Provider:
#Joomla Professional Support: https://gws-desk.com -
#Joomla Specialized Hosting Solutions: https://gws-host.com -


Locked

Return to “Security in Joomla! 3.x”