Book Image

Sitecore Cookbook for Developers

By : Yogesh Patel
Book Image

Sitecore Cookbook for Developers

By: Yogesh Patel

Overview of this book

This book will get you started on building rich websites, and customizing user interfaces by creating content management applications quickly. It will give you an insight into web designs and how to customize the Sitecore architecture as per your website's requirements using best practices. Packed with over 70 recipes to help you achieve and solve real-world common tasks, requirements, and the problems of content management, content delivery, and publishing instance environments. It also presents recipes on Sitecore’s backend processes of customizing pipelines, creating custom event handler and media handler, setting hooks and more. Other topics covered include creating a workflow action, publishing sublayouts and media files, securing your environment by customizing user profiles and access rights, boosting search capabilities, optimising performance, scalability and high-availability of Sitecore instances and much more. By the end of this book, you will have be able to add virtually limitless features to your websites by developing and deploying Sitecore efficiently.
Table of Contents (20 chapters)
Sitecore Cookbook for Developers
Credits
About the Author
About the Reviewer
www.PacktPub.com
Preface
Index

Making security-hardened environments


It is extremely important to make your Sitecore installation configured properly in order to protect it against attacks from malicious forces. In this recipe, you will learn security hardening using some settings and coding.

How to do it…

We will first perform security hardening recommendations on the Sitecore application:

  1. Create a new admin user and delete the default admin user. Also, try to create as few admin users as possible.

  2. From IIS, navigate to the following folders. From their properties, disable their anonymous access. You can even secure admin folders using Windows authentication.

    • /App_Config

    • /sitecore/admin

    • /sitecore/debug

    • /sitecore/shell/WebService

  3. From IIS, deny the execute permission on the /upload folder (mediaFolder) so that any executable file uploaded to the server in this folder won't get executed on downloading it.

  4. Install and configure the Upload Filter Tool (https://sdn.sitecore.net/upload/sitecore6/security_hardening_guide_upload_filter_tool...