Adding additional security to website using .htaccess

Discussion regarding Joomla! 3.x security issues.

Moderators: mandville, General Support Moderators

Forum rules
Forum Rules
Absolute Beginner's Guide to Joomla! <-- please read before posting, this means YOU.
Forum Post Assistant / FPA - If you are serious about wanting help, you will use this tool to help you post.
Windows Defender SmartScreen Issues <-- please read this if using Windows 10.
Locked
FishEagle
Joomla! Intern
Joomla! Intern
Posts: 88
Joined: Wed Nov 30, 2016 5:02 pm
Location: South Africa

Adding additional security to website using .htaccess

Post by FishEagle » Sun Nov 19, 2017 12:51 pm

Hi All,

I would like to know if it is necessary to add additional security features to your website using the .htaccess file?

Is it worth it? If yes, what type (and how many) of security features should one use? Examples are endless...

I'm aware of this site: https://docs.joomla.org/Htaccess_examples_(security) (and many many other...)
But, is it still relevant today (vs. for example in 2011)?

Appreciate any feedback!
I enjoy building websites on an ad-hoc charitable basis.

itoctopus
Joomla! Virtuoso
Joomla! Virtuoso
Posts: 4025
Joined: Mon Nov 25, 2013 4:35 pm
Location: Montreal, Canada
Contact:

Re: Adding additional security to website using .htaccess

Post by itoctopus » Tue Nov 21, 2017 12:23 pm

The .htaccess file that you linked to is mostly relevant, but you will need to check your logs and check for other spam bots and add them to your .htaccess file.

IMHO, the best protection that you can do with .htaccess is to add .htpasswd authentication to your backend.
http://www.itoctopus.com - Joomla consulting at its finest
https://twitter.com/itoctopus - Follow us on Twitter

FishEagle
Joomla! Intern
Joomla! Intern
Posts: 88
Joined: Wed Nov 30, 2016 5:02 pm
Location: South Africa

Re: Adding additional security to website using .htaccess

Post by FishEagle » Wed Nov 22, 2017 7:21 am

Thanks itoctopus!
I enjoy building websites on an ad-hoc charitable basis.


Locked

Return to “Security in Joomla! 3.x”