243
edits
Tonyhanson (talk | contribs) (Added info on Windows editors) |
Tonyhanson (talk | contribs) No edit summary |
||
Line 15: | Line 15: | ||
Specific security needs will be different for every site, but there are some basic suggestions that are universal: | Specific security needs will be different for every site, but there are some basic suggestions that are universal: | ||
*Perform regular backups | *Perform regular backups of your files and you MySQL database tables | ||
*Keep current copies of your backups somewhere else | *Keep current copies of your backups somewhere else | ||
*Change your passwords frequently | *Change your passwords frequently | ||
Line 21: | Line 21: | ||
*Restrict access to known hacker sites in an .htaccess file | *Restrict access to known hacker sites in an .htaccess file | ||
*Restrict known PHP exploits by using PHP.ini | *Restrict known PHP exploits by using PHP.ini | ||
*Schedule and review the output of the 'find ctime -l' command (lists files that have been changed recently, which may be an indication of malicious activity) daily | *Schedule and review the output of the 'find ctime -l' command (lists files that have been changed recently, which may be an indication of malicious activity) daily | ||
*If you have installed 'off the shelf' Wiki/Blog/CMS packages that create tables in MySQL consider changing the default table names (refer to the individual packages documentation to see if this is possible or even recommended). This may fool malicious code that does find its way to your server | |||
*If possible, disable displaying the version of your 'off the shelf' packages. This may throw off malicious software that is targeting specific versions of your software. | |||
== .htaccess == | == .htaccess == |
edits