Welcome, Guest. Please login or register.
Did you miss your activation email?


Login with username, password and session length

Search

 
Advanced search

18110 Posts in 2330 Topics- by 798 Members - Latest Member: jednanis
Pages: [1]   Go Down
Print
Author Topic: Osnovno - obavezzno  (Read 1885 times)
senoworks
Jr. Member
**
Offline Offline

Posts: 56



View Profile
« on: 07.12.2006; 20:59:09 PM »

Pored ostalog treba paziti da su sve i bas sve sctipte up to date. Uprotivnom deinstalirati, ali postoji dobra mogucnost da ima vec update i za sve tvoj ekomponente koje funkcioniraju i sa RG=OFF

ok znaci Versionsnumber:??
Provider:jel ok i siguran


.htaccess
Exploidprotectoptimirana Verzija
OpenSEF-Verzija?
Adminfoder zasticen lozinkom?
u Joomla root folderu vec ima htaccess.txt file, preimenuj u .htaccess i nadogradi sa Exploidprotectoptimiranom verzijom

Server
register_globals = OFF
gpc_magic_quotes = ON

CHMOD
> new files (644)
> new directories (755)

Sljedece file  CHMOD 444?
> .htaccess
> configuration.php
> index.php
> index2.php
> administrator/index.php
> template index.php
> template css-files
Logged

http://www.dezinformator.com   | Prvi portal žute štampe
grdelin
GLOBAL MODERATOR
Hero Member
*
Offline Offline

Posts: 680



View Profile WWW
« Reply #1 on: 28.12.2006; 07:58:14 AM »



gpc_magic_quotes = ON




       Može malo detaljnije ?
Logged

Vatra, voda, vlast, žena, zmija i glupan kobni su po čovjeka ako ih izazove.
Vrlo Jak Tim
GLOBAL MODERATOR
Sr. Member
*
Offline Offline

Posts: 323



View Profile
« Reply #2 on: 27.01.2007; 03:27:15 AM »

Quote

.htaccess
Exploidprotectoptimirana Verzija
u Joomla root folderu vec ima htaccess.txt file, preimenuj u .htaccess i nadogradi sa Exploidprotectoptimiranom verzijom

gpc_magic_quotes = ON

Sljedece file  CHMOD 444?
> .htaccess
> configuration.php
> index.php
> index2.php
> administrator/index.php
> template index.php
> template css-files

Hajde i ovo gore malo detaljnije, posebno ono exploit... itd... ne bi bio zgoreg i copy/paste ili attachment takvog .htaccess-a.

Logged

Svi mi drugi svoju tamu nude, a iz tebe sija vječni sjaj...
Enzo
Zenica
Hero Member
*****
Offline Offline

Posts: 513


MONOBLUE.ORG


View Profile WWW
« Reply #3 on: 27.01.2007; 20:43:14 PM »

Da ti stoji dole navedeni kôd u .htaccess fajlu, tzv common exploit blocker, kod zadnjih verzija joomla paketa to je po defaultu uključeno u htaccess.txt

Code:
########## Begin - Rewrite rules to block out some common exploits
#                             
# Block out any script trying to set a mosConfig value through the URL
RewriteCond %{QUERY_STRING} mosConfig_[a-zA-Z_]{1,21}(=|\%3D) [OR]
# Block out any script trying to base64_encode crap to send via URL
RewriteCond %{QUERY_STRING} base64_encode.*\(.*\) [OR]
# Block out any script that includes a <script> tag in URL
RewriteCond %{QUERY_STRING} (\<|%3C).*script.*(\>|%3E) [NC,OR]
# Block out any script trying to set a PHP GLOBALS variable via URL
RewriteCond %{QUERY_STRING} GLOBALS(=|\[|\%[0-9A-Z]{0,2}) [OR]
# Block out any script trying to modify a _REQUEST variable via URL
RewriteCond %{QUERY_STRING} _REQUEST(=|\[|\%[0-9A-Z]{0,2})
# Send all blocked request to homepage with 403 Forbidden error!
RewriteRule ^(.*)$ index.php [F,L]

Vidi: http://forum.joomla.org/index.php/topic,101814.msg509631.html

Nije loše pročitati sve diskusije i sticky postove vezano za temu sigurnost koje se tiču joomla! CMS-a.

Osim toga nakon završenih izmjena na sajtu, upgrade-a, dodavanja komponenti, modula... bilo čega, obavezno chmodovati fajlove na 644 i foldere na 755 a configuration.php i još neke dole navedene čak i na 444.
« Last Edit: 27.01.2007; 20:45:55 PM by Enzo » Logged

Pages: [1]   Go Up
Print
Jump to: