Skip to main content

Menjaga Keselamatan Laman Web Joomla!

Remove default admin User

Padam user admin – banyak kes SQL injection berlaku menggunakan nama pengguna admin.

File/Folder Permission

Semasa menukar tetapan (terutama yang melibatkan configuration.php) boleh set file permission kepada 777, selepas selesai penukaran tetapan, jangan lupa tukar semula kepada 755.

Guna CHMOD

Tukar ownership folder Joomla! kepada apache. Guna CHOW…

  • PHP files: 644
  • Config files: 666
  • Other folders: 755

FTP Info

Elakkan menyimpan maklumat FTP pada Global Config. Ini kerana maklumat ini akan disimpan dalam configuration.php yang mana jika fail ini diperolehi oleh penggodam, akan menyebabkan mereka boleh menguasai FTP dan memungkinkan menguasai server.

Sembunyikan fail configuration.php (drpd folder public)

http://www.rsjoomla.com/forum/45-rsfirewall/10553-hiding-configurationphp-in-nonpublic-directory.html

Mengesan pencerobohan

Pasang Firewall

  • Dicadangkan gunakan RSFirewall.
  • Boleh buat pengujian sistem – utk kesan fail integriti.

image

MESTI Backup!

Akeeba adalah contoh yang baik.

image

image

Nak backup ke dalam Dropbox pun boleh…

image

Dan boleh pasang website di server lain.

jomDefender

Sembunyikan Joomla! signature (ciri-ciri Joomla! ) daripada dipaparkan kepada awam.

Uji kesahan fail-fail dalam folder Joomla! (sekiranya folder telah diceroboh).

image

CloudFlare

  • Content Delivery Network
  • Pertahanan hadapan untuk domain.
  • Elakkan scanning oleh hacker.

image

Tips lain

Sila lawati http://www.gotsrb.info/Stories/10-security-tips-for-Joomla-website

KURSUS

Untuk penjelasan daripada pakar, sila hadir ke kursus berikut;

Kursus Joomla! Lanjutan: Keselamatan

2005-01-01 10.24.342005-01-01 10.25.272005-01-01 10.25.382005-01-01 10.26.122005-01-01 10.26.222005-01-01 10.26.512005-01-01 10.27.092005-01-01 10.27.242005-01-01 13.21.232005-01-01 13.23.07

Labels:

Comments

Post a Comment

Popular posts from this blog

Several English proverbs and the Malay pair

Or you could download here for the Malay proverbs app – https://play.google.com/store/apps/details?id=net.kerul.peribahasa English proverbs and the Malay pair Corpus Reference: Amir Muslim, 2009. Peribahasa dan ungkapan Inggeris-Melayu. DBP, Kuala Lumpur http://books.google.com.my/books/about/Peribahasa_dan_ungkapan_Inggeris_Melayu.html?id=bgwwQwAACAAJ CTRL+F to search Proverbs in English Definition in English Similar Malay Proverbs Definition in Malay 1 Where there is a country, there are people. A country must have people. Ada air adalah ikan. Ada negeri adalah rakyatnya. 2 Dry bread at home is better than roast meat home's the best hujan emas di negeri orang,hujan batu di negeri sendiri Betapa baik pun tempat orang, baik lagi tempat sendiri. 3 There's no accounting for tastes We can't assume that every people have a same feel Kepala sama hitam hati lain-lain. Dalam kehidupan ini, setiap insan berbeza cara, kesukaan, perangai, tabia...
Post a Comment
Click here to read the complete article ...

searchdelete.php (list records of table to delete)

< form name = 'search' method = 'get' action = '' > Insert the firstname < input type = 'text' name = 'txtname' > < input type = 'submit' value = 'search name' > </ form > < ?php //database connect $db = mysqli_connect ( "localhost" , "root" , "" , "mycompanyhr" ); //checking database connection if ( $db == false ) { echo "Connect failed: " . mysqli_connect_error ( $db ); exit (); } else { echo "Connection successful" ; } $n = $_GET [ 'txtname' ]; $sql = "select EMPNO, FIRSTNAME, LASTNAME, WORKDEPT, PHONENO from employee where FIRSTNAME like '%$n%' " ; $rs = mysqli_query ( $db , $sql ); if ( $rs == false ){ echo ( "Query cannot be executed!<br>" ); echo ( "SQL Error : " . mysqli_error ( $db )); } else { echo "<table border=1>...
Post a Comment
Click here to read the complete article ...

Pemasangan Joomla! 1.7 pada pelayan web komputer anda

Latihan ini akan memasang sistem pengurusan kandungan laman web ke dalam pelayan web yang anda telah pasang sebelum ini . LANGKAH 1: Aktifkan Pelayan Web dan Pangkalan Data Aktifkan XAMPP Control Panel, melalui “ Start->All Programs->ApacheFriends->XAMPP Control Panel ”. Rajah 2.1 Pastikan pelayan web Apache dan pelayan pangkalan data MySQL diaktifkan dengan klik butang START. -> Rajah 2.2
21 comments
Click here to read the complete article ...

Applications of Web 2.0

Web 2.0 describes the changing trends in the use of World Wide Web technology and web design that aim to enhance creativity , secure information sharing, collaboration and functionality of the web. Web 2.0 concepts have led to the development and evolution of web-based communities and hosted services , such as social-networking sites , video sharing sites , wikis , blogs . Find a website or web application that conform to the criteria of Web 2.0. Put the name of the application and the URL in the comment below. Please provide your full name and matrix number. Make sure the application you choose is not already chosen by your friend in the previous comment.
60 comments
Click here to read the complete article ...

Installing Google AdMob into Android Apps

Previously I wrote on why ads are needed to help maintaining an app. Read the article here http://blog.kerul.net/2011/05/generating-revenue-from-free-mobile.html . ---This is quite an old article. You may find the latest supporting AdMob 6.x in here http://blog.kerul.net/2012/08/example-how-to-install-google-admob-6x.html --- This is quite a long tutorial, there are 3 major steps involved. The experiment is done using Windows 7, Eclipse Helios and AdMob SDK 4.1.0 (which currently is the latest-during time of writing). STEP 1: Get the ads from AdMob.com To display the AdMob ads in your Android mobile apps, you need to register first at the admob.com . After completing the registration, login and Add Site/App. Refer to Figure 1. Figure 1 Choose the desired platform and fill in the details (as in Figure 2). Just put http:// in the Android Package URL if your app is not published in the market yet. And click Continue. Figure 2 Download the AdMob Android SDK, and save the zip fil...
22 comments
Click here to read the complete article ...