• Plesk Uservoice will be deprecated by October. Moving forward, all product feature requests and improvement suggestions will be managed through our new platform Plesk Productboard.
    To continue sharing your ideas and feedback, please visit features.plesk.com

secure website

derkrieger

New Pleskian
hello

we use the plesk to host our joomla sites
and we want Protect our website from Hacking using this php.ini

safe_mode = On
disable_functions = "ln, cat, popen, pclose, posix_getpwuid, posix_getgrgid, posix_kill, parse_perms, system, dl, passthru, exec, shell_exec, popen, proc_close, proc_get_status, proc_nice, proc_open, escapeshellcmd, escapeshellarg, show_source, posix_mkfifo, mysql_list_dbs, get_current_user, getmyuid, pconnect, link, symlink, pcntl_exec, ini_alter, pfsockopen, leak, apache_child_terminate, posix_kill, posix_setpgid, posix_setsid, posix_setuid, proc_terminate, syslog, fpassthru, stream_select, socket_select, socket_create, socket_create_listen, socket_create_pair, socket_listen, socket_accept, socket_bind, socket_strerror, pcntl_fork, pcntl_signal, pcntl_waitpid, pcntl_wexitstatus, pcntl_wifexited, pcntl_wifsignaled, pcntl_wifstopped, pcntl_wstopsig, pcntl_wtermsig, openlog, apache_get_modules, apache_get_version, apache_getenv, apache_note, apache_setenv, virtual, chmod, file_upload, delete, deleted, edit, fwrite, cmd, rename, unlink, mkdir, mv, touch, cp, cd, pico"
safe_mode_gid = On
open_basedir = On
register_globals = Off
exec = Off
shell_exec = Off
allow_url_fopen = Off
allow_url_include = Off


how can we do this please ?

thanks
amine
 
You can use the Subscription > Website & Domain > PHP Settings > Additional directives

to override php.ini settings.

There are many things to do to protect your Joomla Installation.
 
ok thanks for yor help

can yo give me example of things what i must do to protect your Joomla sites ?


thanks
amine
 
Keep you Joomla installation up to date

File Permission / Directory Permission 644/755

Mod_Security.

Fail2Ban

Use Rewrites.

Uninstall all the unnecessary Plugin / Components
 
Hello,

@PriyanA missing WAF (firewall) can use security on plesk


so, is not only that can use also akeeba backup pro or aesecure then edit htaccess.

regards
 
Back
Top