Security Checklist/Site Recovery
From Joomla! Documentation
Know what steps to follow to recover your site
- Know the important steps to follow when your site has been compromised. Once you've been compromised, there are few shortcuts. (FAQ)
Reset your administrator password
Find exploit attempts using the *NIX shell
Have a backup and recovery plan in place. Test it regularly.
Get help the right way
- If you believe your Web site was attacked, do not post in the Joomla! forums. If there is a vulnerability, publishing that information could put other Web sites at risk. Instead, report possible security vulnerabilities to the Joomla! Security Task Force.
- If you discover a bug in Joomla! core files, report it here.