Book Image

Joomla! Web Security

Book Image

Joomla! Web Security

Overview of this book

Related Content you might be interested in

Current Title:

Small book image
Joomla! Web Security
Oct, 2008 | 264 pages
No titles found
Table of Contents (16 chapters)
Joomla! Web Security
Joomla! Web Security
Credits
Credits
About the Author
About the Author
About the Reviewer
About the Reviewer
Preface
Preface
Free Chapter
1
Let's Get Started
Let's Get Started
Introduction
Common Terminology
Hosting—Selection and Unique Needs
Architecting for a Successful Site
Downloading Joomla!
.htaccess
Permissions
Common Trip Ups
Setting Up Security Metrics
Summary
2
Test and Development
Test and Development
Welcome to the Laboratory!
Reporting
Using the Ravenswood Joomla! Server
Summary
3
Tools
Tools
Introduction
Tools, Tools, and More Tools
Summary
4
Vulnerabilities
Vulnerabilities
Introduction
Importance of Patching is Paramount
What is a Vulnerability?
End Users
Summary
5
Anatomy of Attacks
Anatomy of Attacks
Introduction
SQL Injections
Remote File Includes
Summary
6
How the Bad Guys Do It
How the Bad Guys Do It
Laws on the Books
Acquiring Target
Sizing up the Target
Vulnerability Tools
Finding Targets to Attack
What Do I Do Then?
Countermeasures
Closing Words
Summary
7
php.ini and .htaccess
php.ini and .htaccess
.htaccess
php.ini
Summary
8
Log Files
Log Files
What are Log Files, Exactly?
Learning to Read the Log
Log File Analysis
Care and Feeding of Your Log Files
Tools to Review Your Log Files
Summary
9
SSL for Your Joomla! Site
SSL for Your Joomla! Site
What is SSL/TLS?
Process Steps for SSL
Performance Considerations
Other Resources
Summary
10
Incident Management
Incident Management
Creating an Incident Response Policy
Developing Procedures Based on Policy to Respond to Incidents
Summary
Security Handbook
Security Handbook
Security Handbook Reference
General Information
Tools
Ports
Logs
List of Critical Settings
General Apache Information
List of Ports
Summary

Security Handbook Reference

  • General Information

    • Preparing your trouble-kit

    • Backup tools

    • Assistance checklist

    • Daily operations

  • Basic security checklist: This is a review model for periodically checking your site or a new site

  • Tools

    • Review of tools (When to use)

  • Ports

    • Bad ports to watch for in your logs

  • Logs

    • Status codes

    • Common log format

    • Country information Top-Level Domain Codes

    • Country IP ranges/addresses

  • .htaccess and php.ini settings

  • Apache—a few important settings

  • List of critical settings

  • List of "well-known" ports according to iana.org

Previous Section
End of Section
Next Section