Security
From Joomla! Documentation
This page contains relevant links for securing your Joomla! Website. As a Joomla! site owner or administrator you should remember:
- There's no one right way! Due to the variety and complexity of modern web servers, security issues can't be resolved with simple, one-size-fits-all solutions. You, or someone you trust, must learn enough about your web server infrastructure to make valid security decisions.
- There's no substitute for experience! To secure your web site, you must gain real experience , or get experienced help from others.
- It's not as hard as it looks: The following checklist below may seem intimidating, but you don't have to deal with all of it at once. As you become more familiar with GNU/Linux, Apache, MySQL, PHP, HTTP, and Joomla, you'll add refinements to your combination of security tactics.
...Security is a moving target, so today's expert might be tomorrow's victim...
- Joomla Security Checklist
- How to enable HTTPS on your site
- Security and Performance FAQs
- Top 10 Stupidest Administrator Tricks
- Secure coding guidelines (for developers)
Joomla Security Forums
Joomla Security Feeds
List of articles that belong to the category "Security"
- Backup Basics for a Joomla! Web Site
- Delete Installation folder
- Global configuration
- Global configuration
- How do UNIX file permissions work?
- How do Windows file permissions work?
- How do phpSuExec file permissions work?
- How do you block direct hot linking to image files using htaccess?
- How do you block directory scans using htaccess?
- How do you convert an htaccess.txt file into a .htaccess file?
- How do you password protect directories using htaccess?
- How do you recursively adjust file and directory permissions?
- How do you restrict directory access by IP address using htaccess?
- How to add CSRF anti-spoofing to forms
- htaccess examples (security)
- Security Checklist
- Secure coding guidelines
- Security FAQ
- Security and Performance FAQs
- Security hotfixes for Joomla EOL versions
- Taking the website temporarily offline
- Top 10 Stupidest Administrator Tricks
- Verifying permissions
- What are these strange (URL-Encoded) characters doing in your code?
- Where can you learn more about file permissions?
- How to Use the New HTTP Header Management in Joomla 4.0?