Secure site

[andronopoulos]

Hi, what can i do to protect my site from attacks because often joomla sites hacked...

[MiCCAS]

Moved Topic

Make sure that your joomla site is always updated and be careful with the components/modules you install.

[ErikThorsen]

Also make sure that your config file is set to 644 after making necessary changes. And make sure that files/folders which should not be set to 777 isn't. Most errors and attacks is because of the settings ( chmod ) of files and folders and usually these are related to the config file itself set to 777

[andronopoulos]

Thanks........

[mikaelfs]

Also make sure that your config file is set to 644 after making necessary changes. And make sure that files/folders which should not be set to 777 isn't. Most errors and attacks is because of the settings ( chmod ) of files and folders and usually these are related to the config file itself set to 777

actually it's not about 644 / 777 or other magic numbers. the basic principle is to give your files and dirs proper permission so that it can run safely.

once you're playing with suexec where apache uid = your uid, you'll find that 711 is enough :)