secure website

[derkrieger]

hello

we use the plesk to host our joomla sites
and we want Protect our website from Hacking using this php.ini

safe_mode = On
disable_functions = "ln, cat, popen, pclose, posix_getpwuid, posix_getgrgid, posix_kill, parse_perms, system, dl, passthru, exec, shell_exec, popen, proc_close, proc_get_status, proc_nice, proc_open, escapeshellcmd, escapeshellarg, show_source, posix_mkfifo, mysql_list_dbs, get_current_user, getmyuid, pconnect, link, symlink, pcntl_exec, ini_alter, pfsockopen, leak, apache_child_terminate, posix_kill, posix_setpgid, posix_setsid, posix_setuid, proc_terminate, syslog, fpassthru, stream_select, socket_select, socket_create, socket_create_listen, socket_create_pair, socket_listen, socket_accept, socket_bind, socket_strerror, pcntl_fork, pcntl_signal, pcntl_waitpid, pcntl_wexitstatus, pcntl_wifexited, pcntl_wifsignaled, pcntl_wifstopped, pcntl_wstopsig, pcntl_wtermsig, openlog, apache_get_modules, apache_get_version, apache_getenv, apache_note, apache_setenv, virtual, chmod, file_upload, delete, deleted, edit, fwrite, cmd, rename, unlink, mkdir, mv, touch, cp, cd, pico"
safe_mode_gid = On
open_basedir = On
register_globals = Off
exec = Off
shell_exec = Off
allow_url_fopen = Off
allow_url_include = Off


how can we do this please ?

thanks
amine

 

[PriyanA]

You can use the Subscription > Website & Domain > PHP Settings > Additional directives

to override php.ini settings.

There are many things to do to protect your Joomla Installation.

 

[derkrieger]

ok thanks for yor help

can yo give me example of things what i must do to protect your Joomla sites ?


thanks
amine

 

[PriyanA]

Keep you Joomla installation up to date

File Permission / Directory Permission 644/755

Mod_Security.

Fail2Ban

Use Rewrites.

Uninstall all the unnecessary Plugin / Components

 

[alexonb]

Hello,

@PriyanA missing WAF (firewall) can use security on plesk


so, is not only that can use also akeeba backup pro or aesecure then edit htaccess.

regards

 

[alexonb]

Hello,

@PriyanA missing WAF (firewall) can use security on plesk


so, is not only that can use also akeeba backup pro or aesecure then edit htaccess.

regards

is not akeeba backup pro (sorry wrong) akeeba admin tools pro (that)