Security Checklist/Site Administration - Revision history

Hutchy68: update navigational call

2012-10-16T01:01:46Z

update navigational call

2012-10-13T21:41:08Z

improving page

2012-10-13T21:05:04Z

Hutchy68 moved page Security Checklist 5 - Site Administration to Security Checklist/Site Administration: Since a series of articles, moving to subpages with navigation

2012-08-17T00:03:28Z

‎Edited by: Not needed; as this is a wiki and you can see from the history who edited this page.

2011-06-27T00:23:49Z

‎Maintain a strong site backup process: minor grammar: can not -> cannot

2011-06-26T23:43:34Z

‎Don't reinvent every wheel: minor punctuation

2011-06-26T23:42:48Z

‎Proactively seek SQL injections vulnerabilities: Paros proxy link

2011-06-26T23:41:31Z

‎Monitor crack attempts: links and minor grammar

2010-03-10T07:20:17Z

‎Choose A Checklist

2009-11-26T23:47:56Z

‎Use well-formed passwords

@@ Line 1: / Line 1: @@
-{{RightTOC}}
+{{:Security Checklist}}
-−
 == Site Administration ==
@@ Line 51: / Line 50: @@
 ===Don't reinvent every wheel===
 : Every now and then, hire a professional Joomla! security consultant to review your configurations. Do you remember the adage, ''"Anyone who acts as their own lawyer has a fool for a client."?'' The same goes for Web development. Don't expect to catch all of your own security mistakes.
 <!-- KEEP THIS AT THE END OF THE PAGE -->
 [[Category:Security Checklist]]

@@ Line 60: / Line 60: @@
 # [[Security Checklist 6 - Site Recovery|Site Recovery]]
 <!-- KEEP THIS AT THE END OF THE PAGE -->
 [[Category:Security Checklist]]

@@ Line 10: / Line 10: @@
 ===Maintain a strong site backup process===
-: Never rely on others' backups. Take responsibility for your backup procedures. Many ISPs state in their contract that you can not rely solely on their backups.
+: Never rely on others' backups. Take responsibility for your backup procedures. Many ISPs state in their contract that you cannot rely solely on their backups.
 ===Monitor crack attempts===

@@ Line 50: / Line 50: @@
 ===Don't reinvent every wheel===
-: Every now and then hire a professional Joomla! security consultant to review your configurations. Do you remember the adage, ''"Anyone who acts as their own lawyer has a fool for a client."'' The same goes for Web development. Don't expect to catch all of your own security mistakes.
+: Every now and then, hire a professional Joomla! security consultant to review your configurations. Do you remember the adage, ''"Anyone who acts as their own lawyer has a fool for a client."?'' The same goes for Web development. Don't expect to catch all of your own security mistakes.
 == Choose A Checklist==

@@ Line 32: / Line 32: @@
 ===Proactively seek SQL injections vulnerabilities===
-: Use tools such as Paros Proxy for conducting automated SQL Injection tests against your PHP applications.
+: Use tools such as [http://www.parosproxy.org/ Paros Proxy] for conducting automated SQL Injection tests against your PHP applications.
        <ul>
           <li>[http://www.google.com/search?q=%22SQL+Injection Google Search]</li>

@@ Line 13: / Line 13: @@
 ===Monitor crack attempts===
-: VPS and dedicated server users can run TripWire or SAMHAIN. These applications provide exhaustive file checking and reporting functionality, and can be installed in a stealthy manner to help protect themselves in the event of a serious infiltration. (Note: Users of shared servers can not use this technique.)</li>
+: VPS and dedicated server users can run [http://www.tripwire.com/ TripWire] or [http://la-samhna.de/samhain/ SAMHAIN]. These applications provide exhaustive file checking and reporting functionality, and can be installed in a stealthy manner to help protect themselves in the event of a serious infiltration. (Note: Users of shared servers cannot use this technique.)</li>
 ===Perform automated intrusion detection===

@@ Line 4: / Line 4: @@
 ===Use well-formed passwords===
-: Change passwords regularly and keep them unique. A strong  password has a random combination of letters, numbers, or symbols. Avoid using single names or words found in a dictionary. Never use the names of your relatives, pets, etc. Search the forums for a script supplied by Wizzie that automatically changes passwords. This is a great tool for administrators or multiple sites. There are numerous handy websites that have [http://strongpasswordgenerator.com|strong password generators].
+: Change passwords regularly and keep them unique. A strong  password has a random combination of letters, numbers, or symbols. Avoid using single names or words found in a dictionary. Never use the names of your relatives, pets, etc. Search the forums for a script supplied by Wizzie that automatically changes passwords. This is a great tool for administrators or multiple sites. There are numerous handy websites that have [http://strongpasswordgenerator.com strong password generators].
 ===Follow a password leveling scheme===