any recommendations for locking down php.ini for joomla 3+? - Joomla! Forum - community, help and support


hi all,

are there articles can me understand functions need enabled/disabled on php.ini maximize php security?

i found following article it's recommended older version of joomla , i'm not sure if should follow or not?

http://kb.siteground.com/article/recomm ... urity.html

please advise.

mikeali wrote:i found following article it's recommended older version of joomla , i'm not sure if should follow or not?
you should not
register_globals -> default off since php4.2, deprecated , removed in 5.4
magic_quotes_gpc -> deprecated 5.3, removed 5.4 , joomla3 requirement off not on
allow_url_fopen -> turn off, it`s ok being on blabla,
my setting on , allow_url_include off
expose_php -> hide php version this, use php on server knows when looking @ site

and pls dont take advise! there more 4 settings when comes security , there more 4!
so if admin of live server, advise managed one





Comments

Popular posts from this blog

How to change text Component easybook reloaded *newbee* - Joomla! Forum - community, help and support

After Effect warning: A problem occurred when processing OpenGL commands

Preconditions Failed. - Joomla! Forum - community, help and support