• Dear Pleskians! The Plesk Forum will be undergoing scheduled maintenance on Monday, 7th of July, at 9:00 AM UTC. The expected maintenance window is 2 hours.
    Thank you in advance for your patience and understanding on the matter.

secure website

derkrieger

New Pleskian
hello

we use the plesk to host our joomla sites
and we want Protect our website from Hacking using this php.ini

safe_mode = On
disable_functions = "ln, cat, popen, pclose, posix_getpwuid, posix_getgrgid, posix_kill, parse_perms, system, dl, passthru, exec, shell_exec, popen, proc_close, proc_get_status, proc_nice, proc_open, escapeshellcmd, escapeshellarg, show_source, posix_mkfifo, mysql_list_dbs, get_current_user, getmyuid, pconnect, link, symlink, pcntl_exec, ini_alter, pfsockopen, leak, apache_child_terminate, posix_kill, posix_setpgid, posix_setsid, posix_setuid, proc_terminate, syslog, fpassthru, stream_select, socket_select, socket_create, socket_create_listen, socket_create_pair, socket_listen, socket_accept, socket_bind, socket_strerror, pcntl_fork, pcntl_signal, pcntl_waitpid, pcntl_wexitstatus, pcntl_wifexited, pcntl_wifsignaled, pcntl_wifstopped, pcntl_wstopsig, pcntl_wtermsig, openlog, apache_get_modules, apache_get_version, apache_getenv, apache_note, apache_setenv, virtual, chmod, file_upload, delete, deleted, edit, fwrite, cmd, rename, unlink, mkdir, mv, touch, cp, cd, pico"
safe_mode_gid = On
open_basedir = On
register_globals = Off
exec = Off
shell_exec = Off
allow_url_fopen = Off
allow_url_include = Off


how can we do this please ?

thanks
amine
 
You can use the Subscription > Website & Domain > PHP Settings > Additional directives

to override php.ini settings.

There are many things to do to protect your Joomla Installation.
 
ok thanks for yor help

can yo give me example of things what i must do to protect your Joomla sites ?


thanks
amine
 
Keep you Joomla installation up to date

File Permission / Directory Permission 644/755

Mod_Security.

Fail2Ban

Use Rewrites.

Uninstall all the unnecessary Plugin / Components
 
Hello,

@PriyanA missing WAF (firewall) can use security on plesk


so, is not only that can use also akeeba backup pro or aesecure then edit htaccess.

regards
 
Back
Top