1. Change the default database prefix (jos_)
2. Remove version number / name of extensions
3. Use a SEF(Search Engine Friendly) component
4. Keep Joomla! and extensions up to date
5. Use the correct CHMOD for each folder and file. This cofiguration should be used:
2. Remove version number / name of extensions
3. Use a SEF(Search Engine Friendly) component
4. Keep Joomla! and extensions up to date
5. Use the correct CHMOD for each folder and file. This cofiguration should be used:
- PHP files: 644
- Config files: 666
- Other folders: 755
When you installed an extension that you didn't like, don't set the
extension to unbublished. If you do, the vulnerable files will still be
on your website. So simply use the un-install function to totally get
rid of the extension.
7. Change your .htaccess file
Add the following lines to your .htaccess file to block out some common exploits.
########## Begin - Rewrite rules to block out some common exploits # # Block out any script trying to set a mosConfig value through the URL RewriteCond %{QUERY_STRING} mosConfig_[a-zA-Z_]{1,21}(=|%3D) [OR] # Block out any script trying to base64_encode crap to send via URL RewriteCond %{QUERY_STRING} base64_encode.*(.*) [OR] # Block out any script that includes a < script> tag in URL RewriteCond %{QUERY_STRING} (<|%3C).*script.*(>|%3E) [NC,OR] # Block out any script trying to set a PHP GLOBALS variable via URL RewriteCond %{QUERY_STRING} GLOBALS(=|[|%[0-9A-Z]{0,2}) [OR] # Block out any script trying to modify a _REQUEST variable via URL RewriteCond %{QUERY_STRING} _REQUEST(=|[|%[0-9A-Z]{0,2}) [OR] # Block out any script that tries to set CONFIG_EXT (com_extcal2 issue) RewriteCond %{QUERY_STRING} CONFIG_EXT([|%20|%5B).*= [NC,OR] # Block out any script that tries to set sbp or sb_authorname via URL (simpleboard) RewriteCond %{QUERY_STRING} sbp(=|%20|%3D) [OR] RewriteCond %{QUERY_STRING} sb_authorname(=|%20|%3D) # Send all blocked request to homepage with 403 Forbidden error! RewriteRule ^(.*)$ index.php [F,L] # ########## End - Rewrite rules to block out some common exploits