SlideShare a Scribd company logo
1 of 32
Ā 
Ā 
Joomla! 1.5 Security ,[object Object],[object Object],15 November 2008
Is Joomla! safe?
Is the World Wide Web Safe?
[object Object],Is Joomla! safe? Quote taken from: http://forum.joomla.org/viewtopic.php?f=432&t=318351&st=0&sk=t&sd=a
[object Object],Quote taken from: http://forum.joomla.org/viewtopic.php?f=432&t=318351&st=0&sk=t&sd=a
What is this presentation about?
[object Object],[object Object],[object Object],[object Object],[object Object],Presentation overview Presentation approach taken from http://docs.joomla.org/Category:Security_Checklist
Getting started
Getting started
Getting started
[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],Getting started
Hosting and server set up Shared hosting? Or Dedicated hosting?
Hosting and server set up ā€œ register_globalsā€ ā€œ open_basedirā€
[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],Hosting and server set up
[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]
Joomla! setup
[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],Joomla! setup
Joomla! setup
[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],Joomla! setup
Site administration
[object Object],[object Object],[object Object],[object Object],[object Object],Site administration
[object Object],[object Object],[object Object],[object Object],Site recovery
Links
[object Object],[object Object],[object Object],Links
[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],Sites to monitor when you take security seriously
Joomla! ā€œ All togetherā€
Questions?
Ā 
Ā 

More Related Content

What's hot

Security talk: Fortifying your Joomla! website
Security talk: Fortifying your Joomla! websiteSecurity talk: Fortifying your Joomla! website
Security talk: Fortifying your Joomla! website
Sigsiu.NET
Ā 
WordPress Security 2014 - The Basics of Security
WordPress Security 2014 - The Basics of SecurityWordPress Security 2014 - The Basics of Security
WordPress Security 2014 - The Basics of Security
Tony Perez
Ā 
Securing Your Joomla website
Securing Your Joomla websiteSecuring Your Joomla website
Securing Your Joomla website
Mike Carson
Ā 
Security Isn't Scary and It's Not Rocket Science either.
Security Isn't Scary and It's Not Rocket Science either.Security Isn't Scary and It's Not Rocket Science either.
Security Isn't Scary and It's Not Rocket Science either.
Michele Butcher-Jones
Ā 
WordPress Security - Learning From Hacks
WordPress Security - Learning From HacksWordPress Security - Learning From Hacks
WordPress Security - Learning From Hacks
Tony Perez
Ā 

What's hot (20)

Security Day - Chesf
Security Day - ChesfSecurity Day - Chesf
Security Day - Chesf
Ā 
Security talk: Fortifying your Joomla! website
Security talk: Fortifying your Joomla! websiteSecurity talk: Fortifying your Joomla! website
Security talk: Fortifying your Joomla! website
Ā 
OWASP Top 10 2013
OWASP Top 10 2013OWASP Top 10 2013
OWASP Top 10 2013
Ā 
WORDPRESS SECURITY: HOW TO AVOID BEING HACKED
WORDPRESS SECURITY: HOW TO AVOID BEING HACKEDWORDPRESS SECURITY: HOW TO AVOID BEING HACKED
WORDPRESS SECURITY: HOW TO AVOID BEING HACKED
Ā 
Seminar1
Seminar1Seminar1
Seminar1
Ā 
WordPress Security 2014 - The Basics of Security
WordPress Security 2014 - The Basics of SecurityWordPress Security 2014 - The Basics of Security
WordPress Security 2014 - The Basics of Security
Ā 
Securing Your Joomla website
Securing Your Joomla websiteSecuring Your Joomla website
Securing Your Joomla website
Ā 
JWT Authentication with Django at PyTennessee 2019
JWT Authentication with Django at PyTennessee 2019JWT Authentication with Django at PyTennessee 2019
JWT Authentication with Django at PyTennessee 2019
Ā 
Camaras
CamarasCamaras
Camaras
Ā 
Securing Your Moodle
Securing Your MoodleSecuring Your Moodle
Securing Your Moodle
Ā 
How to Secure your WordPress Website - WordCamp UK 2014
How to Secure your WordPress Website - WordCamp UK 2014How to Secure your WordPress Website - WordCamp UK 2014
How to Secure your WordPress Website - WordCamp UK 2014
Ā 
What's coming in Joomla 4 - Joomla Day Budapest 2013
What's coming in Joomla 4 - Joomla Day Budapest 2013What's coming in Joomla 4 - Joomla Day Budapest 2013
What's coming in Joomla 4 - Joomla Day Budapest 2013
Ā 
RailsConf 2015 - Metasecurity: Beyond Patching Vulnerabilities
RailsConf 2015 - Metasecurity: Beyond Patching VulnerabilitiesRailsConf 2015 - Metasecurity: Beyond Patching Vulnerabilities
RailsConf 2015 - Metasecurity: Beyond Patching Vulnerabilities
Ā 
GoSec 2015 - Protecting the web from within
GoSec 2015 - Protecting the web from withinGoSec 2015 - Protecting the web from within
GoSec 2015 - Protecting the web from within
Ā 
How To Build The Perfect Backtrack 4 Usb Drive
How To Build The Perfect Backtrack 4 Usb DriveHow To Build The Perfect Backtrack 4 Usb Drive
How To Build The Perfect Backtrack 4 Usb Drive
Ā 
Security Isn't Scary and It's Not Rocket Science either.
Security Isn't Scary and It's Not Rocket Science either.Security Isn't Scary and It's Not Rocket Science either.
Security Isn't Scary and It's Not Rocket Science either.
Ā 
Technical SEO for WordPress - 2017 edition
Technical SEO for WordPress - 2017 editionTechnical SEO for WordPress - 2017 edition
Technical SEO for WordPress - 2017 edition
Ā 
Securing Drupal 7: Do not get Hacked or Spammed to death!
Securing Drupal 7: Do not get Hacked or Spammed to death!Securing Drupal 7: Do not get Hacked or Spammed to death!
Securing Drupal 7: Do not get Hacked or Spammed to death!
Ā 
WordPress Security - Learning From Hacks
WordPress Security - Learning From HacksWordPress Security - Learning From Hacks
WordPress Security - Learning From Hacks
Ā 
AEM hacker - approaching Adobe Experience Manager webapps in bug bounty programs
AEM hacker - approaching Adobe Experience Manager webapps in bug bounty programsAEM hacker - approaching Adobe Experience Manager webapps in bug bounty programs
AEM hacker - approaching Adobe Experience Manager webapps in bug bounty programs
Ā 

Viewers also liked

Viewers also liked (8)

Leadership Lessons Learned from Joomla - Open Source Days 2011
Leadership Lessons Learned from Joomla - Open Source Days 2011Leadership Lessons Learned from Joomla - Open Source Days 2011
Leadership Lessons Learned from Joomla - Open Source Days 2011
Ā 
Joomla platform LGPL survey
Joomla platform LGPL surveyJoomla platform LGPL survey
Joomla platform LGPL survey
Ā 
Joomladay Switzerland - Joomla! 1.5 and roadmap to future versions
Joomladay Switzerland - Joomla! 1.5 and roadmap to future versionsJoomladay Switzerland - Joomla! 1.5 and roadmap to future versions
Joomladay Switzerland - Joomla! 1.5 and roadmap to future versions
Ā 
7 Lessons from Mozilla
7 Lessons from Mozilla7 Lessons from Mozilla
7 Lessons from Mozilla
Ā 
Running an Online Community with Joomla!
Running an Online Community with Joomla!Running an Online Community with Joomla!
Running an Online Community with Joomla!
Ā 
Building the Joomla Platform
Building the Joomla PlatformBuilding the Joomla Platform
Building the Joomla Platform
Ā 
The bare naked truth about Joomla!'s data
The bare naked truth about Joomla!'s data  The bare naked truth about Joomla!'s data
The bare naked truth about Joomla!'s data
Ā 
Looking at Joomla! 3.3
Looking at Joomla! 3.3Looking at Joomla! 3.3
Looking at Joomla! 3.3
Ā 

Similar to Joomladay Switzerland - security

Joomla Security v3.0
Joomla Security v3.0Joomla Security v3.0
Joomla Security v3.0
Ajay Lulia
Ā 
LAMP security practices
LAMP security practicesLAMP security practices
LAMP security practices
Amit Kejriwal
Ā 

Similar to Joomladay Switzerland - security (20)

OWASP Thailand 2016 - Joomla Security
OWASP Thailand 2016 - Joomla Security OWASP Thailand 2016 - Joomla Security
OWASP Thailand 2016 - Joomla Security
Ā 
Joomla Security
Joomla  SecurityJoomla  Security
Joomla Security
Ā 
Joomla Security
Joomla SecurityJoomla Security
Joomla Security
Ā 
WordPress End-User Security
WordPress End-User SecurityWordPress End-User Security
WordPress End-User Security
Ā 
Making Joomla Insecure - Explaining security by breaking it
Making Joomla Insecure - Explaining security by breaking itMaking Joomla Insecure - Explaining security by breaking it
Making Joomla Insecure - Explaining security by breaking it
Ā 
Download It
Download ItDownload It
Download It
Ā 
Joomla! security jday2015
Joomla! security jday2015Joomla! security jday2015
Joomla! security jday2015
Ā 
Joomla Day Austin Part 4
Joomla Day Austin Part 4Joomla Day Austin Part 4
Joomla Day Austin Part 4
Ā 
Keeping Your Joomla! Site Secure
Keeping Your Joomla! Site SecureKeeping Your Joomla! Site Secure
Keeping Your Joomla! Site Secure
Ā 
Joomla! security jday2015
Joomla! security jday2015Joomla! security jday2015
Joomla! security jday2015
Ā 
Joomla Security v3.0
Joomla Security v3.0Joomla Security v3.0
Joomla Security v3.0
Ā 
Locking Down Your WordPress Site
Locking Down Your WordPress SiteLocking Down Your WordPress Site
Locking Down Your WordPress Site
Ā 
Session10-PHP Misconfiguration
Session10-PHP MisconfigurationSession10-PHP Misconfiguration
Session10-PHP Misconfiguration
Ā 
Seven steps to better security
Seven steps to better securitySeven steps to better security
Seven steps to better security
Ā 
Top 10 Web Security Vulnerabilities (OWASP Top 10)
Top 10 Web Security Vulnerabilities (OWASP Top 10)Top 10 Web Security Vulnerabilities (OWASP Top 10)
Top 10 Web Security Vulnerabilities (OWASP Top 10)
Ā 
Php go vrooom!
Php go vrooom!Php go vrooom!
Php go vrooom!
Ā 
PHP Security
PHP SecurityPHP Security
PHP Security
Ā 
Dark Alleys/Internet Security
Dark Alleys/Internet SecurityDark Alleys/Internet Security
Dark Alleys/Internet Security
Ā 
LAMP security practices
LAMP security practicesLAMP security practices
LAMP security practices
Ā 
Beginning WordPress Security WordCamp North Canton 2015
Beginning WordPress Security WordCamp North Canton 2015Beginning WordPress Security WordCamp North Canton 2015
Beginning WordPress Security WordCamp North Canton 2015
Ā 

More from Wilco Jansen

More from Wilco Jansen (20)

Wisconsin Jug Presentation
Wisconsin Jug PresentationWisconsin Jug Presentation
Wisconsin Jug Presentation
Ā 
Continuous Integration In Php
Continuous Integration In PhpContinuous Integration In Php
Continuous Integration In Php
Ā 
Cms Bash Groningen Opening talk
Cms Bash Groningen Opening talkCms Bash Groningen Opening talk
Cms Bash Groningen Opening talk
Ā 
Webcast So C 2009, Why Community Matters
Webcast So C 2009, Why Community MattersWebcast So C 2009, Why Community Matters
Webcast So C 2009, Why Community Matters
Ā 
Cms Expo Keynote
Cms Expo KeynoteCms Expo Keynote
Cms Expo Keynote
Ā 
Joomladay UK - Joomla! Where Are We Now
Joomladay UK - Joomla! Where Are We NowJoomladay UK - Joomla! Where Are We Now
Joomladay UK - Joomla! Where Are We Now
Ā 
Joomladay UK SEO presentation
Joomladay UK SEO presentationJoomladay UK SEO presentation
Joomladay UK SEO presentation
Ā 
Impact Of A Cms Framework Change - Holland Open Netherlands
Impact Of A Cms Framework Change - Holland Open NetherlandsImpact Of A Cms Framework Change - Holland Open Netherlands
Impact Of A Cms Framework Change - Holland Open Netherlands
Ā 
2008 04 04 Joomla!Dagen
2008 04 04 Joomla!Dagen2008 04 04 Joomla!Dagen
2008 04 04 Joomla!Dagen
Ā 
Presentatie De Zwerm Groep Vtiger Dutch Joomla!day
Presentatie De Zwerm Groep Vtiger Dutch Joomla!dayPresentatie De Zwerm Groep Vtiger Dutch Joomla!day
Presentatie De Zwerm Groep Vtiger Dutch Joomla!day
Ā 
Police Utrecht Web Dutch Joomla! day
Police Utrecht Web Dutch Joomla! dayPolice Utrecht Web Dutch Joomla! day
Police Utrecht Web Dutch Joomla! day
Ā 
Joomladagen 2008 Sugar Crm Joomla Bridge Bas Vredeling
Joomladagen 2008   Sugar Crm Joomla Bridge   Bas VredelingJoomladagen 2008   Sugar Crm Joomla Bridge   Bas Vredeling
Joomladagen 2008 Sugar Crm Joomla Bridge Bas Vredeling
Ā 
Joomla10 Joomla15 Migratie
Joomla10 Joomla15 MigratieJoomla10 Joomla15 Migratie
Joomla10 Joomla15 Migratie
Ā 
Seo Presentation Lars Hilse on the Dutch Joomla!day 5 April 2008
Seo Presentation Lars Hilse on the Dutch Joomla!day 5 April 2008Seo Presentation Lars Hilse on the Dutch Joomla!day 5 April 2008
Seo Presentation Lars Hilse on the Dutch Joomla!day 5 April 2008
Ā 
Presentation Angie Radke and Kor Dwarshuis on the Dutch Joomla!day April 5th ...
Presentation Angie Radke and Kor Dwarshuis on the Dutch Joomla!day April 5th ...Presentation Angie Radke and Kor Dwarshuis on the Dutch Joomla!day April 5th ...
Presentation Angie Radke and Kor Dwarshuis on the Dutch Joomla!day April 5th ...
Ā 
ACL presentation Hannes Pappenberg on Dutch Joomla!day 5 April 2008
ACL presentation Hannes Pappenberg on Dutch Joomla!day 5 April 2008ACL presentation Hannes Pappenberg on Dutch Joomla!day 5 April 2008
ACL presentation Hannes Pappenberg on Dutch Joomla!day 5 April 2008
Ā 
Jd
JdJd
Jd
Ā 
Jd2
Jd2Jd2
Jd2
Ā 
Joomla
JoomlaJoomla
Joomla
Ā 
Keynote Joomladag Netherlands 4 April 2008 Netherlands
Keynote Joomladag Netherlands 4 April 2008 NetherlandsKeynote Joomladag Netherlands 4 April 2008 Netherlands
Keynote Joomladag Netherlands 4 April 2008 Netherlands
Ā 

Recently uploaded

Recently uploaded (20)

2024: Domino Containers - The Next Step. News from the Domino Container commu...
2024: Domino Containers - The Next Step. News from the Domino Container commu...2024: Domino Containers - The Next Step. News from the Domino Container commu...
2024: Domino Containers - The Next Step. News from the Domino Container commu...
Ā 
Tata AIG General Insurance Company - Insurer Innovation Award 2024
Tata AIG General Insurance Company - Insurer Innovation Award 2024Tata AIG General Insurance Company - Insurer Innovation Award 2024
Tata AIG General Insurance Company - Insurer Innovation Award 2024
Ā 
04-2024-HHUG-Sales-and-Marketing-Alignment.pptx
04-2024-HHUG-Sales-and-Marketing-Alignment.pptx04-2024-HHUG-Sales-and-Marketing-Alignment.pptx
04-2024-HHUG-Sales-and-Marketing-Alignment.pptx
Ā 
šŸ¬ The future of MySQL is Postgres šŸ˜
šŸ¬  The future of MySQL is Postgres   šŸ˜šŸ¬  The future of MySQL is Postgres   šŸ˜
šŸ¬ The future of MySQL is Postgres šŸ˜
Ā 
Mastering MySQL Database Architecture: Deep Dive into MySQL Shell and MySQL R...
Mastering MySQL Database Architecture: Deep Dive into MySQL Shell and MySQL R...Mastering MySQL Database Architecture: Deep Dive into MySQL Shell and MySQL R...
Mastering MySQL Database Architecture: Deep Dive into MySQL Shell and MySQL R...
Ā 
Strategies for Unlocking Knowledge Management in Microsoft 365 in the Copilot...
Strategies for Unlocking Knowledge Management in Microsoft 365 in the Copilot...Strategies for Unlocking Knowledge Management in Microsoft 365 in the Copilot...
Strategies for Unlocking Knowledge Management in Microsoft 365 in the Copilot...
Ā 
How to Troubleshoot Apps for the Modern Connected Worker
How to Troubleshoot Apps for the Modern Connected WorkerHow to Troubleshoot Apps for the Modern Connected Worker
How to Troubleshoot Apps for the Modern Connected Worker
Ā 
Apidays New York 2024 - Scaling API-first by Ian Reasor and Radu Cotescu, Adobe
Apidays New York 2024 - Scaling API-first by Ian Reasor and Radu Cotescu, AdobeApidays New York 2024 - Scaling API-first by Ian Reasor and Radu Cotescu, Adobe
Apidays New York 2024 - Scaling API-first by Ian Reasor and Radu Cotescu, Adobe
Ā 
Axa Assurance Maroc - Insurer Innovation Award 2024
Axa Assurance Maroc - Insurer Innovation Award 2024Axa Assurance Maroc - Insurer Innovation Award 2024
Axa Assurance Maroc - Insurer Innovation Award 2024
Ā 
TrustArc Webinar - Unlock the Power of AI-Driven Data Discovery
TrustArc Webinar - Unlock the Power of AI-Driven Data DiscoveryTrustArc Webinar - Unlock the Power of AI-Driven Data Discovery
TrustArc Webinar - Unlock the Power of AI-Driven Data Discovery
Ā 
Developing An App To Navigate The Roads of Brazil
Developing An App To Navigate The Roads of BrazilDeveloping An App To Navigate The Roads of Brazil
Developing An App To Navigate The Roads of Brazil
Ā 
presentation ICT roal in 21st century education
presentation ICT roal in 21st century educationpresentation ICT roal in 21st century education
presentation ICT roal in 21st century education
Ā 
HTML Injection Attacks: Impact and Mitigation Strategies
HTML Injection Attacks: Impact and Mitigation StrategiesHTML Injection Attacks: Impact and Mitigation Strategies
HTML Injection Attacks: Impact and Mitigation Strategies
Ā 
A Domino Admins Adventures (Engage 2024)
A Domino Admins Adventures (Engage 2024)A Domino Admins Adventures (Engage 2024)
A Domino Admins Adventures (Engage 2024)
Ā 
Boost Fertility New Invention Ups Success Rates.pdf
Boost Fertility New Invention Ups Success Rates.pdfBoost Fertility New Invention Ups Success Rates.pdf
Boost Fertility New Invention Ups Success Rates.pdf
Ā 
Boost PC performance: How more available memory can improve productivity
Boost PC performance: How more available memory can improve productivityBoost PC performance: How more available memory can improve productivity
Boost PC performance: How more available memory can improve productivity
Ā 
A Year of the Servo Reboot: Where Are We Now?
A Year of the Servo Reboot: Where Are We Now?A Year of the Servo Reboot: Where Are We Now?
A Year of the Servo Reboot: Where Are We Now?
Ā 
Exploring the Future Potential of AI-Enabled Smartphone Processors
Exploring the Future Potential of AI-Enabled Smartphone ProcessorsExploring the Future Potential of AI-Enabled Smartphone Processors
Exploring the Future Potential of AI-Enabled Smartphone Processors
Ā 
Partners Life - Insurer Innovation Award 2024
Partners Life - Insurer Innovation Award 2024Partners Life - Insurer Innovation Award 2024
Partners Life - Insurer Innovation Award 2024
Ā 
How to Troubleshoot Apps for the Modern Connected Worker
How to Troubleshoot Apps for the Modern Connected WorkerHow to Troubleshoot Apps for the Modern Connected Worker
How to Troubleshoot Apps for the Modern Connected Worker
Ā 

Joomladay Switzerland - security