View source for Security Checklist/Hosting and Server Setup

===Use Apache ''.htaccess''=== <!--T:7-->
</translate>
''<translate><!--T:8--> See also [[S:MyLanguage/htaccess examples (security)|.htaccess examples]]</translate>''
<translate><!--T:9--> Block typical exploit attempts with local Apache ''.htaccess'' files. This option is not enabled on all servers. Check with your host if you run into problems. Using ''.htaccess'', you can password-protect sensitive directories, such as ''administrator'', restrict access to sensitive directories by IP Address, and depending on your server's configuration, you may be able to increase security by switching to the latest PHP version.</translate>

<translate><!--T:10--> Joomla ships with a [[S:MyLanguage/Preconfigured htaccess|preconfigured .htaccess]] file, but '''you''' need to choose to use it. The file is called ''htaccess.txt''. To use it, rename it to ''.htaccess'' and place it in the root of your site using FTP. One important point to note is that the distributed file is called ''htaccess.txt'' and the live file on your site is called ''.htaccess''. The file your site actually uses is '''not''' updated when you update your site to a new version of Joomla. You must manually make the changes to use the new file version.</translate>

<translate><!--T:11--> Consider following the "Least Privilege" principle for running PHP using tools such as ''PHPsuExec'', ''php_suexec'' or ''suPHP''. (Note: These are advanced methods that require agreement and coordination with your hosting provider. Such options are enabled or disabled on a server-wide basis and are not individually adjustable on shared servers.</translate>

<translate><!--T:12--> Consider using a serverside filtering solution like Apache ''mod_security''. A great starting point is the OWASP ModSecurity</translate> [https://coreruleset.org/ CoreRuleSet]

<translate>