any recommendations for locking down php.ini for joomla 3+? - Joomla! Forum - community, help and support
hi all,
are there articles can me understand functions need enabled/disabled on php.ini maximize php security?
i found following article it's recommended older version of joomla , i'm not sure if should follow or not?
http://kb.siteground.com/article/recomm ... urity.html
please advise.
are there articles can me understand functions need enabled/disabled on php.ini maximize php security?
i found following article it's recommended older version of joomla , i'm not sure if should follow or not?
http://kb.siteground.com/article/recomm ... urity.html
please advise.
you should notmikeali wrote:i found following article it's recommended older version of joomla , i'm not sure if should follow or not?
register_globals -> default off since php4.2, deprecated , removed in 5.4
magic_quotes_gpc -> deprecated 5.3, removed 5.4 , joomla3 requirement off not on
allow_url_fopen -> turn off, it`s ok being on blabla,
my setting on , allow_url_include off
expose_php -> hide php version this, use php on server knows when looking @ site
and pls dont take advise! there more 4 settings when comes security , there more 4!
so if admin of live server, advise managed one
Comments
Post a Comment