Hey all, I need some assistance, as security is not my forte, mostly just SEO and content. I have a new site that is a Joomla/VM set up and I need some one to perform a quick free security analysis on the site before I promote it. I had a few Joomla sites in the past that I'd hosted and forgotten about without actually using them, that when reapproached they had been defaced and hacked. Never had that happen on WP. Anyone who can help please get in touch. Thanks
FYI, WP is every bit as problematic as Joomla. That said ... The key to security is right there in your note: "I'd hosted and forgotten about without actually using them". When you leave a site unattended -- Joomla, WordPress, doesn't make any difference -- that is an invitation to having the site compromised. There are some sever-level things you can do to enhance security but if you are on shared hosting there are two things you should do: 1. Ensure your htaccess has at a minimum the "common exploit" section working. There are some other htaccess rules you can consider here: http://docs.joomla.org/Htaccess_examples_(security) 2. Keep the code updated. That includes Joomla and all plugins.
You are right Ray. It's also important for joomla website. Now, I can prevent SQL Injection for my joomla site...