[GLLUG] Securing Joomla

[Thomas Hruska]

Caleb Cushing wrote:
> In the Current stable release of Joomla their are some major security
> holes. Including lack of SSL (or other encryption) and plain text
> password submission, for the admin interface. I'm wondering what our
> webmasters at gllug have done to secure this as I have recently begun
> work on my own joomla site.

Many protocols can be secured using stunnel.

http://www.stunnel.org/

(Assuming Joomla is a client-server app.)


If it runs on a regular web server, just pump everything through 
HTTPS...which Apache supports.

--
Thomas Hruska
CubicleSoft President
Ph: 517-803-4197

Safe C++ Design Principles (First Edition)
Learn how to write memory leak-free, secure,
stable, portable, and user-friendly software.

Learn more and view a sample chapter:
http://www.CubicleSoft.com/SafeCPPDesign/