[null, {"document_url": "https://www.internetblog.org.uk/post/1388/more-joomla-security-tips/", "unformatted_src": "https://static.internetblog.org.uk/files/2010/06/joomla-sucirity-300x159.png", "src": "https://static.internetblog.org.uk/files/2010/06/joomla-sucirity-300x159.png", "formatted_filename": "joomla sucirity", "alt_text": "joomla sucirity", "rendered_width": 300, "rendered_height": 159}, null, {"document_url": "https://www.internetblog.org.uk/post/1388/more-joomla-security-tips/", "unformatted_src": "https://static.internetblog.org.uk/files/2013/04/15.jpg", "src": "https://static.internetblog.org.uk/files/2013/04/15.jpg", "alt_text": "dedicated hosting server", "rendered_width": 310, "rendered_height": 155}, null, {"document_url": "https://www.internetblog.org.uk/post/1388/more-joomla-security-tips/", "unformatted_src": "https://static.internetblog.org.uk/files/2012/11/dedicated-server.jpg", "src": "https://static.internetblog.org.uk/files/2012/11/dedicated-server.jpg", "formatted_filename": "dedicated server", "alt_text": "dedicated server", "rendered_width": 310, "rendered_height": 155}, null, {"document_url": "https://www.internetblog.org.uk/post/1388/more-joomla-security-tips/", "unformatted_src": "https://static.internetblog.org.uk/files/2012/11/server.jpg", "src": "https://static.internetblog.org.uk/files/2012/11/server.jpg", "formatted_filename": "server", "alt_text": "server", "rendered_width": 310, "rendered_height": 155}, null, {"document_url": "https://www.internetblog.org.uk/post/1388/more-joomla-security-tips/", "unformatted_src": "https://static.internetblog.org.uk/files/2012/11/physical-servers.jpg", "src": "https://static.internetblog.org.uk/files/2012/11/physical-servers.jpg", "formatted_filename": "physical servers", "alt_text": "physical servers security", "rendered_width": 310, "rendered_height": 155}, null, {"document_url": "https://www.internetblog.org.uk/post/1388/more-joomla-security-tips/", "unformatted_src": "https://www.internetblog.org.uk/files/2016/02/register-domain-name.png", "src": "https://www.internetblog.org.uk/files/2016/02/register-domain-name.png", "formatted_filename": "register domain name"}, null]
Home / Joomla Hosting / More Joomla Security Tips

More Joomla Security Tips

3 June 2010 Joomla Hosting, Security, Software Leave a comment 673 Views Yesterday, I highlighted some of the critical Joomla security issues that you should consider. Here are a few more you should add to your list:

All of these can be set within your local php.ini directory (if your server allows it), rather than manipulating the global one for the server.

1. Use the “disable_functions” to prevent the use of some dangerous PHP functions:
Example: disable_fuctions = show_source, exec, phpinfo

2. Use open_basedir. This will limit which files PHP can opened to the directory tree specified (i.e. in your home folder)
Example: open_basedir = /home/webguy/www/html

3. Disable register_globals. Joomla will actually warn you if you have this enabled:

Example: register_globals = 0

4. Disable allow_url_fopen. This is used when you want to create PHP wrappers to open remote URLs. You can probably imagine the dangers that would create if exploited.
Example: allow_url_fopen = 0

Source: Joomla Security Checklist

Tags hosting joomla php register_globals security server

Previous Domain name screw-ups: big companies who forget about their domain names
Next How to Set Custom Linux Console Colors
 
Collocation is the movement of the servers from an in house location usually to a …