Minimizing the number of php files on document root - Joomla! Forum - community, help and support
i believe attacks brought injecting php code in web server.
if can minimize number of php file contained in published directories (ideally index.php) can find , delete other (injected) php files.
in way there not risk looking @ php code can find vulnerabilities.
do believe idea?
we tried , seems copying every files in directory (outside pub), changing published index.php include original index.php, deleting php files in published directories new index.php, work.
perhaps not efficient way, but..
if people agree point point, coding team can plan feature in future releases.
thanks attention
if can minimize number of php file contained in published directories (ideally index.php) can find , delete other (injected) php files.
in way there not risk looking @ php code can find vulnerabilities.
do believe idea?
we tried , seems copying every files in directory (outside pub), changing published index.php include original index.php, deleting php files in published directories new index.php, work.
perhaps not efficient way, but..
if people agree point point, coding team can plan feature in future releases.
thanks attention
moving files/directories root of joomla installation described makes no sense @ all. moving files/directories prevents viewing casual observer. offers no protection @ if access can been gained domain in fashion, nor prevent root access domain result of security compromises in joomla, 3rd party extensions, or insecurities through badly configured/protected servers. if httpd process (webserver - joomla) process can access files/directories hacker can access files/directories. if httpd process can not access files/directories have no site.
Comments
Post a Comment