security-best-practices

SECURITY OF A WEBSITE
Do you know how important it is?
There's is no free lunch!

One of the world's best Open Source Content Management System
Joomla! tells us

There's no free lunch!

Don't be fooled by Joomla's award-winning ease of use. Maintaining a secure, dynamic Web site on the open Internet is not easy. Adequate security requires constant watchfulness and effort.

Many perspectives
There's no one right way!

Due to the variety and complexity of modern web systems, security issues can't be resolved with simple, one-size-fits-all solutions.

Learning indispensable
You, or someone you trust, must learn enough about your server infrastructure to make valid security decisions.

Experience Matters - Use Forums
There's no substitute for experience!

To secure your web site, you must gain real experience (some of which will be bitter), or get experienced help from others.

Chaltahai*** attitude is dangerous!

Rise above the herd

***[slang in Indian Hindi, meaning "Don't bother"]

The Security Forums are filled with "Help! I've been hacked" posts by people who did NOT follow standard security practices (this author included). If you decided to study documents such as this before your site is attacked, congratulation, you're already above the herd.

It's not as hard as it looks

The following checklist may seem intimidating, but you don't have to deal with all of it at once. As you become familiar with tools of modern Open Source Web development, suchn as GNU/Linux, Apache, MySQL, SQL, PHP, HTTP, CSS, XML, RSS, TCP/IP, FTP, Subversion, JavaScript, Joomla!, you'll add refinements to your set of security tactics.

All complex, dynamic, and open systems require powerful error checking and recovery methods. Web sites are no different.

Strong security is a moving target. Today's expert might be tomorrow's victim. Welcome to the game...

Source
Joomla Administrators Security Checklist - Joomla! Documentation
Getting Started _ _ _