New answers tagged

2

All the answers suggested I would do as well. If you want another level of security I would enable Apache Basic Authentication http://httpd.apache.org/docs/current/howto/auth.html with a username/password on your admin URL within Joomla (make sure that this URL is https accessible only). This is done within your httpd.conf file whereby you generate a ...


0

I suggest you scan your whole server to find malicious files inside. For the site's security, I think you already use Akeeba Admin Tools. If you do then change the administrator url with some random characters. With that way, the brute forces attack will fail even before they reach the login page. Other then that, you better change all the passwords ...


3

So, it's the same old story. But, first, there are few things to do: Firstly, scan your site with some antivirus tool. Then do this: Upgrade all components/plugins Upgrade your Joomla on latest version Limit the upload of files only to allowed extensions (e.g. .pdf, .doc, .docx) Maybe put some additional stuff before upload (let's say captcha or some ...


0

NamesPro can install your DS RR in the TLD zone, although they can't host your signed zone. It doesn't sound like that would be an issue for you. It's a manual process, you have to open a ticket and supply them with the DS RR you want installed. But they did get it done pretty quick, maybe an hour on a Sunday.


1

This is a simple thing to fix. It is done with robots.txt User-agent: * Disallow: /*? This will help to block access to all URLs that include a question mark (?) (more specifically, any URL that begins with your domain name, followed by any string, followed by a question mark, followed by any string). See: http://serverfault.com/questions/139487/meaning-...


3

I recommend having a third party come and audit your systems and provide you a summary of compliance, which you can share with your customers. When I say third party, I mean a separate security company that specialise in IT security audits. ISO27001 compliance is normally a good place to start when seeking to prove security controls are in place. It doesn't ...


0

Depending on what the attacker is doing capturing the requests he is making may or may not give you any useful information. As for what he is trying to do it is unlikely anyone could give you a useful answer there other than the attacker themselves and anyone attempting to do so would only be giving their opinion. In these situations the only thing you can ...


1

Anything you do to handle authentication even if it is a static site will still become somewhat dynamic simply from the need to have a database backend for authentication, which in turn means more than likely the trade-off of using the database to power the page content as well. What would best suit your needs here is a content management system. There are a ...


0

If you don't want him to have direct access to the Plesk panel then the easiest way would be to give him an FTP user account and define a new MySQL user account with remote access granted that way he can use the MySQL Desktop Application to get into the MySQL database to manage the schema. Once he has finished his work you can disable remote access to the ...


0

The thing you need to be careful of here is that Amazon is not simply a website provider but is also a cloud services provider and also has a service whereby users can access a virtualized desktop interface on the Amazon network as a remote desktop session. This particular service uses a Windows Server gateway and so the desktop resolution and OS fingerprint ...


0

Absolutely you can use Google forms. You can use whatever form service you wish to as long as they support storing the collected data within the EU. Googlw achieves compliance with the law through offers to sign EU Model Contract Clauses and a Data Processing Amendment. Google also undergoes independent audits of data protection practices and provides ...


1

Google changes this around every now and then, and whenever they do I have to 're-find' where each of the settings are. So you're not alone! You're right that a browser key is essentially 'public' and should be limited by domain to protect it from being stolen. It's worth noting the worst that can happen if its stolen is that someone could use up your free ...


1

Browsers are only software that sends requests to your website. They can be used maliciously or not. Your website should be designed in such a way that it does not matter what requests are sent, your site is safe. Anything that a malfunctioning browser can do, an attacker could do more directly. So, in a large sense, no, the vulnerabilities in browsers have ...



Top 50 recent answers are included