10 Tips to secure your Joomla website
By convergence IT Services
https://support.convergenceservices.in/
What are we going to see here?
Why your Joomla website got hacked?10 ways to prevent Joomla website
hackingWho are we?Contact us
Why your Joomla website got Hacked? Joomla is an open-source CMS, it is
supported and maintained by millions of Joomla users around the world.
Though it is not easy to hack a Joomla website, because of its robust security features, but at times due to the negligence on part of developers the website becomes vulnerable to hacking.
10 ways to prevent Joomla website hacking
Keeping hackers at a distance is not a rocket science but at the same time it should not be overlooked. Next 10 slides shows some of the common yet least understood reasons to why hackers sometimes become successful to hack Joomla websites.
1. Change the default database prefix (jos_) Hackers are different breed they do all
they can to hack websites and one of the most common way is to write code that will try to retrieve data from the jos_users table. This helps them to retrieve all the username and password from the super administrator of the website. To safeguard your website from such attack it is highly recommended to change the default prefix to random prefix.
2. Keep your Joomla version updated Joomla CMS regularly releases its updated
version by removing the existing bugs, and adding enhanced security features. Keeping your website up-to-date with the latest version can fix many of the vulnerability and keep your website safe. Though it is quite a task to keep on updating to the latest version when you have plenty of extensions like components, plugins, templates, modules and languages to upload but all the effort is worth to ensure the security of your website.
3. Change your .htaccess file
Joomla CMS by default has write permissions to .htaccess file since joomla has to constantly update it when you are using SEF or Search Engine Friendly url. Due to this your website becomes vulnerable for attacks so it is advisable for you to set your .htaccess permission to somewhat 444(r-r-r-) or maybe 440(r-r--) or something similar.
4. Get away with old extensions and Remove leftover files Keep your extensions up-to-date, remove
the old and unsupported extensions and find a suitable alternative to it. Many times it happens that you have installed an extension but due to some reason you don’t like it or it does not serve your purpose, what you do? Keep it unpublished, or let it be there forever? This is very close you can come in compromising your website. All you need to do is use a simple and harmless uninstall feature, get rid of those unwanted extensions and heave a sigh of relief.
5. Remove version number and name of extensions You are a developer and you must
know the ABC of Joomla security yet how many times you have slapped your hand to your head in dismay to know that you forgot to remove the version number and name of extension giving easy entry to hackers. It’s better late than never. If you have not done this do it right away.
6. Do not give write permission on your *.php files This is another reason why hackers
exploit your website. Giving write permission on your Joomla *.php files can be a very reason why Mr.Hacker visit your website and hack it effortlessly. You should always take an effort to set the permission of all you *.php to 444.
7. Do not give execute permission on public directories We become so much engrossed with our
creation that we forget something very basic and important to keep hackers at bay. One of these is giving execute permission on Public directories. These directories let users to upload their files and if the directories allow scripts to run and if that script turns out to a malicious then it becomes easier for hacker to get the website infected. Just give a permission of 766 on all public directories and reduce the chances of hacking your website.
8. Do not give all possible permission to the database users After setting up the Joomla website it
is important that a database user should not be given all the possible permissions like INSERT rows, UPDATE rows, DELETE rows, CREATE tables etc. Joomla database user should be given only necessary permission to keep the risk of hacking through vulnerable exploit to minimum.
9. Hacking through your vulnerable web-server Most of the time developers go by rule book
of Joomla website hacking, which does not mention that sometime going for cheap and unreliable web-hosting can be the reason. Just to save few dollars users sometimes opt for cheap web-hosting service provider and compromise on their website security. When all is said and done, this is very easy to solve all you need to do is change your web-hosting services provider and cheer up.
10. Thinking you are invincible
Whether you are a small business or a large multi-billion dollar conglomerate you are never safe unless and until you make these measures as your routine exercise. Hackers are lurking everywhere finding vulnerability to the websites to hack it. Your crucial data, financial details and private information will be in peril if we don’t give heed to the wisdom of Joomla website security. As the age old proverb goes, “Prevention is always better than cure” still hold true today.
Who are we?
We are Convergence IT Services, software and web development company our exclusive website maintenance services Convergence support Desk offers you various Joomla and other website maintenance service plans. Loaded with tons of features and backed with expert team members this service allows your business to scale and flourish.
