The Joomla Professionals section of the Joomla SEF website is a collection of tips and tricks for configuring your Apache / cPanel / Joomla servers for optimal performance and security. While Joomla is an excellent solution for web site hosting, the availability of the open source code lends the application to vulnerabilities that would not be as easily discovered with private applications. Many of the suggestions found in this section will require an advanced understanding of server and Joomla management in order to implement. We will eventually migrate this collection into a Forum so that collaboration is possible. The Joomla SEF Team |
|
Using Mod Rewrite to Increase Joomla Security |
|
Written by The Joomla SEF Team
|
|
Sunday, 01 June 2008 |
|
Most installations of Apache should come with the mod_rewrite module already configured and active. For those of you that are hosting the Joomla CMS system on a shared hosting environment (ie: you've bought a generic web hosting package), then you are forced to edit a file named .HTACCESS in order to setup the securities for your website. In a dedicated hosting environment where you have full access to the server configuration HTTPD.CONF file, you can create global rules that will be INHERITED by each website ( also called a VirtualHost ) on your server. Most installations of Apache should come with the mod_rewrite module already configured and active. For those of you that are hosting the Joomla CMS system on a shared hosting environment (ie: you've bought a generic web hosting package), then you are forced to edit a file named .HTACCESS in order to setup the securities for your website. In a dedicated hosting environment where you have full access to the server configuration HTTPD.CONF file, you can create global rules that will be INHERITED by each website ( also called a VirtualHost ) on your server. If you are in control of a dedicated server, it should be considered a best practice to configure your apache server for best security, and then allow particular account to have more flexibility as the need arises. The following instructions will guide you through the process for setting up mod_rewrite security options that will prevent many common vulnerabilities from being exploited. |
|
Last Updated ( Tuesday, 10 June 2008 )
|
|
Read more...
|
|
