This book is written to help you secure your Joomla! site from the dangerous things on the Web. Thus, it is important to revisit php.ini and .htaccess. Further, it should be noted that even though you might go through all this advice and set up everything as solidly as you can, you may still be successfully attacked. What we are discussing in this chapter will help you tune specific portions of your security architecture to keep the bad guys out. This chapter continues to help us refine our "defence in depth", meaning we are not depending on a single layer of protection to provide a solid defence. With that in mind, let's look at php.ini and .htaccess in greater detail.

These two files are often underutilized, misunderstood, and clearly misused. Yet once you gain the basics of them, you can make your website do almost anything.

At the end of this chapter are a few links to help you learn more about these valuable files. As an administrator of either your own...