To secure my Joomla account.

Discussion regarding Joomla! 3.x security issues.

Moderators: mandville, General Support Moderators

Forum rules
Forum Rules
Absolute Beginner's Guide to Joomla! <-- please read before posting, this means YOU.
Forum Post Assistant / FPA - If you are serious about wanting help, you will use this tool to help you post.
Windows Defender SmartScreen Issues <-- please read this if using Windows 10.
Locked
jaishree
Joomla! Fledgling
Joomla! Fledgling
Posts: 1
Joined: Wed Sep 21, 2016 11:16 am

To secure my Joomla account.

Post by jaishree » Wed Sep 21, 2016 11:24 am

I want to secure my joomla account and read on a blog that we can put 'configuration.php' file outside WWW folder.
Can we do that ? If yes then how it will secure my account.
Need help.

Any other steps to harden my joomla account security are appreciated.
Last edited by toivo on Wed Sep 21, 2016 11:26 am, edited 1 time in total.
Reason: mod note: moved to 3.x Security

User avatar
ribo
Joomla! Virtuoso
Joomla! Virtuoso
Posts: 3507
Joined: Sun Jan 03, 2010 8:47 pm
Contact:

Re: To secure my Joomla account.

Post by ribo » Wed Sep 21, 2016 11:34 am

Please read https://docs.joomla.org/Security . Always update your joomla, template, third party extensions, have correct permissions for folders and files, and good hosting company.
chat room spontes : http://www.spontes.com

User avatar
darb
Joomla! Hero
Joomla! Hero
Posts: 2042
Joined: Thu Jul 06, 2006 12:57 pm
Location: Stockholm Sweden

Re: To secure my Joomla account.

Post by darb » Thu Sep 29, 2016 6:44 am

You can use 3:pds extension like JHackGuard, Akeeba Admin Tool Pro, DMC Firewall, RS Firewall etc etc and also secure your site by configure a better htaccess file in Joomla root https://docs.joomla.org/Htaccess_examples_(security) this is included in Akeeba Admin Tool Pro and also search for more htaccess improvements to add there..

User avatar
leolam
Joomla! Master
Joomla! Master
Posts: 20652
Joined: Mon Aug 29, 2005 10:17 am
Location: Netherlands/ Germany/ S'pore/Bogor/ North America
Contact:

Re: To secure my Joomla account.

Post by leolam » Thu Sep 29, 2016 6:54 am

jaishree wrote:I want to secure my joomla account and read on a blog that we can put 'configuration.php' file outside WWW folder.
Can we do that ? If yes then how it will secure my account.
No it does not secures your account at all and it will create huge problems for you (no more automated updates among others, redoing all what needs to be done for this with each update and a lot more. It does not add at all to security as well. Search the forums since we have endless discussions had about it. Best advise is to refrain from doing so

Leo 8)
Joomla's #1 Professional Services Provider:
#Joomla Professional Support: https://gws-desk.com -
#Joomla Specialized Hosting Solutions: https://gws-host.com -

User avatar
darb
Joomla! Hero
Joomla! Hero
Posts: 2042
Joined: Thu Jul 06, 2006 12:57 pm
Location: Stockholm Sweden

Re: To secure my Joomla account.

Post by darb » Fri Sep 30, 2016 2:04 pm

What you can do with your configuration file to make it "more secure" is to change the permissions from 644 to 444 for that configuration file..


Locked

Return to “Security in Joomla! 3.x”