Skip to main content

Menjaga Keselamatan Laman Web Joomla!

Remove default admin User

Padam user admin – banyak kes SQL injection berlaku menggunakan nama pengguna admin.

File/Folder Permission

Semasa menukar tetapan (terutama yang melibatkan configuration.php) boleh set file permission kepada 777, selepas selesai penukaran tetapan, jangan lupa tukar semula kepada 755.

Guna CHMOD

Tukar ownership folder Joomla! kepada apache. Guna CHOW…

  • PHP files: 644
  • Config files: 666
  • Other folders: 755

FTP Info

Elakkan menyimpan maklumat FTP pada Global Config. Ini kerana maklumat ini akan disimpan dalam configuration.php yang mana jika fail ini diperolehi oleh penggodam, akan menyebabkan mereka boleh menguasai FTP dan memungkinkan menguasai server.

Sembunyikan fail configuration.php (drpd folder public)

http://www.rsjoomla.com/forum/45-rsfirewall/10553-hiding-configurationphp-in-nonpublic-directory.html

Mengesan pencerobohan

Pasang Firewall

  • Dicadangkan gunakan RSFirewall.
  • Boleh buat pengujian sistem – utk kesan fail integriti.

image

MESTI Backup!

Akeeba adalah contoh yang baik.

image

image

Nak backup ke dalam Dropbox pun boleh…

image

Dan boleh pasang website di server lain.

jomDefender

Sembunyikan Joomla! signature (ciri-ciri Joomla! ) daripada dipaparkan kepada awam.

Uji kesahan fail-fail dalam folder Joomla! (sekiranya folder telah diceroboh).

image

CloudFlare

  • Content Delivery Network
  • Pertahanan hadapan untuk domain.
  • Elakkan scanning oleh hacker.

image

Tips lain

Sila lawati http://www.gotsrb.info/Stories/10-security-tips-for-Joomla-website

KURSUS

Untuk penjelasan daripada pakar, sila hadir ke kursus berikut;

Kursus Joomla! Lanjutan: Keselamatan

2005-01-01 10.24.342005-01-01 10.25.272005-01-01 10.25.382005-01-01 10.26.122005-01-01 10.26.222005-01-01 10.26.512005-01-01 10.27.092005-01-01 10.27.242005-01-01 13.21.232005-01-01 13.23.07

Comments

Popular posts from this blog

Several English proverbs and the Malay pair

Or you could download here for the Malay proverbs app – https://play.google.com/store/apps/details?id=net.kerul.peribahasa English proverbs and the Malay pair Corpus Reference: Amir Muslim, 2009. Peribahasa dan ungkapan Inggeris-Melayu. DBP, Kuala Lumpur http://books.google.com.my/books/about/Peribahasa_dan_ungkapan_Inggeris_Melayu.html?id=bgwwQwAACAAJ CTRL+F to search Proverbs in English Definition in English Similar Malay Proverbs Definition in Malay 1 Where there is a country, there are people. A country must have people. Ada air adalah ikan. Ada negeri adalah rakyatnya. 2 Dry bread at home is better than roast meat home's the best hujan emas di negeri orang,hujan batu di negeri sendiri Betapa baik pun tempat orang, baik lagi tempat sendiri. 3 There's no accounting for tastes We can't assume that every people have a same feel Kepala sama hitam hati lain-lain. Dalam kehidupan ini, setiap insan berbeza cara, kesukaan, perangai, tabia...

Submit your blog address here

Create your own blog and send the address by submitting the comment of this article. Make sure to provide your full name, matrix and URL address of your blog. Refer to the picture below. Manual on developing a blog using blogger.com and AdSense, download here … Download Windows Live Writer (a superb offline blog post editor)

Installing Google AdMob into Android Apps

Previously I wrote on why ads are needed to help maintaining an app. Read the article here http://blog.kerul.net/2011/05/generating-revenue-from-free-mobile.html . ---This is quite an old article. You may find the latest supporting AdMob 6.x in here http://blog.kerul.net/2012/08/example-how-to-install-google-admob-6x.html --- This is quite a long tutorial, there are 3 major steps involved. The experiment is done using Windows 7, Eclipse Helios and AdMob SDK 4.1.0 (which currently is the latest-during time of writing). STEP 1: Get the ads from AdMob.com To display the AdMob ads in your Android mobile apps, you need to register first at the admob.com . After completing the registration, login and Add Site/App. Refer to Figure 1. Figure 1 Choose the desired platform and fill in the details (as in Figure 2). Just put http:// in the Android Package URL if your app is not published in the market yet. And click Continue. Figure 2 Download the AdMob Android SDK, and save the zip fil...

Pemasangan Joomla! 1.7 pada pelayan web komputer anda

Latihan ini akan memasang sistem pengurusan kandungan laman web ke dalam pelayan web yang anda telah pasang sebelum ini . LANGKAH 1: Aktifkan Pelayan Web dan Pangkalan Data Aktifkan XAMPP Control Panel, melalui “ Start->All Programs->ApacheFriends->XAMPP Control Panel ”. Rajah 2.1 Pastikan pelayan web Apache dan pelayan pangkalan data MySQL diaktifkan dengan klik butang START. -> Rajah 2.2

Multimedia Dictionary app for Android – with Source codes

I decided to publish the following source code of a Multimedia Dictionary app for Android. The apps is a dictionary of the following languages, Malay, Arabic and English. All the word entries are available in the locally (sqlite), however we do not have the complete word list. This code is specifically designed to support only Android 2.1, 2.2 and 2.3. This is due to lack of Arabic character support in the listed Android version. And there ‘s a special treatment to the Arabic characters which we found quite complicated. It won’t run beautifully on the Android 3.0 and above. Sorry for the lack of documentation, however if you’re familiar with Java in Android, it actually simple. I’ll do further documentation later. You may somehow revamp the apps, or do what ever you want. I would like to However make only one request, please do not remove the advertisement in the main screen. To test the Arabic input, you need to have the Arabic keyboard – use this http://bit.ly/ask1-1 . Not sure with...