Security Checklist/Getting Started - Revision history

Wilsonge: Move SVN to git

2020-04-08T21:50:45Z

Move SVN to git

← Older revision		Revision as of 21:50, 8 April 2020
Line 41:		Line 41:

	# <translate><!--T:25--> '''Even a beginner can start at the head of the herd''' User forums for many systems are clogged with [http://www.google.com/search?q=Help!+I've+been+hacked Help! I've been hacked] posts by people who did NOT follow standard security practices. If you are studying this checklist before your site is attacked, congratulations, you're already ahead of the herd.</translate>		# <translate><!--T:25--> '''Even a beginner can start at the head of the herd''' User forums for many systems are clogged with [http://www.google.com/search?q=Help!+I've+been+hacked Help! I've been hacked] posts by people who did NOT follow standard security practices. If you are studying this checklist before your site is attacked, congratulations, you're already ahead of the herd.</translate>
	# <translate><!--T:26--> '''It's not as hard as it looks''' If this is one of your first websites, security issues may seem overwhelming, but you don't have to deal with all of them at once. Start with the most critical issues. As you become more familiar with [http://www.gnu.org GNU] tools and techniques, including</translate> [http://www.gnu.org/ GNU/Linux], [http://www.apache.org Apache], [http://www.mysql.com MySQL], [http://en.wikipedia.org/wiki/SQL SQL], [http://www.php.net PHP], [http://en.wikipedia.org/wiki/HTTP HTTP], [http://en.wikipedia.org/wiki/CSS CSS], [http://en.wikipedia.org/wiki/XML XML], [http://en.wikipedia.org/wiki/RSS RSS], [http://en.wikipedia.org/wiki/TCP/IP TCP/IP], [http://en.wikipedia.org/wiki/FTP FTP], [~~http~~://~~subversion~~.~~tigris.org~~/ ~~Subversion~~], [http://en.wikipedia.org/wiki/JavaScript JavaScript], <translate><!--T:27--> and [http://www.joomla.org Joomla!], you'll add refinements to your set of security tactics.</translate>		# <translate><!--T:26--> '''It's not as hard as it looks''' If this is one of your first websites, security issues may seem overwhelming, but you don't have to deal with all of them at once. Start with the most critical issues. As you become more familiar with [http://www.gnu.org GNU] tools and techniques, including</translate> [http://www.gnu.org/ GNU/Linux], [http://www.apache.org Apache], [http://www.mysql.com MySQL], [http://en.wikipedia.org/wiki/SQL SQL], [http://www.php.net PHP], [http://en.wikipedia.org/wiki/HTTP HTTP], [http://en.wikipedia.org/wiki/CSS CSS], [http://en.wikipedia.org/wiki/XML XML], [http://en.wikipedia.org/wiki/RSS RSS], [http://en.wikipedia.org/wiki/TCP/IP TCP/IP], [http://en.wikipedia.org/wiki/FTP FTP], [https://git-scm.com/ Git], [http://en.wikipedia.org/wiki/JavaScript JavaScript], <translate><!--T:27--> and [http://www.joomla.org Joomla!], you'll add refinements to your set of security tactics.</translate>
	# <translate><!--T:28--> '''You can get help''' If you believe your website was attacked, '''do not''' simply post an announcement with full details in the Joomla! forums. If you are dealing with a new vulnerability or new form of attack, publishing that information could put other websites at risk. Instead, report possible security vulnerabilities to the [http://developer.joomla.org/security Joomla! Security Task Force].</translate>		# <translate><!--T:28--> '''You can get help''' If you believe your website was attacked, '''do not''' simply post an announcement with full details in the Joomla! forums. If you are dealing with a new vulnerability or new form of attack, publishing that information could put other websites at risk. Instead, report possible security vulnerabilities to the [http://developer.joomla.org/security Joomla! Security Task Force].</translate>

	<!-- KEEP THIS AT THE END OF THE PAGE -->		<!-- KEEP THIS AT THE END OF THE PAGE -->
	[[Category:Security Checklist{{#translation:}}]]		[[Category:Security Checklist{{#translation:}}]]

M-b-o at 20:50, 4 April 2020

2020-04-04T20:50:21Z

← Older revision		Revision as of 20:50, 4 April 2020
Line 45:		Line 45:

	<!-- KEEP THIS AT THE END OF THE PAGE -->		<!-- KEEP THIS AT THE END OF THE PAGE -->
	[[Category:Security Checklist]]		[[Category:Security Checklist{{#translation:}}]]

M-b-o: Marked this version for translation

2020-04-04T19:55:15Z

Marked this version for translation

M-b-o at 19:55, 4 April 2020

2020-04-04T19:55:05Z

Tom Hutchison: Protected "Security Checklist/Getting Started": temporary until JSST group is created ([Edit=Allow only administrators] (indefinite) [Move=Allow only administrators] (indefinite))

2015-05-14T19:58:17Z

Protected "Security Checklist/Getting Started": temporary until JSST group is created ([Edit=Allow only administrators] (indefinite) [Move=Allow only administrators] (indefinite))

← Older revision	Revision as of 19:58, 14 May 2015
(No difference)

Jzlcdh: /* The most important guidelines */ updated forums

2014-03-14T14:34:55Z

The most important guidelines: updated forums

← Older revision		Revision as of 14:34, 14 March 2014
Line 24:		Line 24:


	::Hunt down the many nuggets of wisdom found in the [http://forum.joomla.org Joomla! Forums], in particular the [http://forum.joomla.org/viewforum.php?f=~~432~~ Joomla! 1.5 Security Forum] and the [http://forum.joomla.org/viewforum.php?f=~~267~~ Joomla! 1.0 Security Forum].		::Hunt down the many nuggets of wisdom found in the [http://forum.joomla.org Joomla! Forums], in particular the [http://forum.joomla.org/viewforum.php?f=714 Joomla! 3.x Security Forum] and the [http://forum.joomla.org/viewforum.php?f=621 Joomla! 2.x Security Forum].

Wilsonge: Add 3.1

2013-04-29T09:27:32Z

Add 3.1

← Older revision		Revision as of 09:27, 29 April 2013
Line 7:		Line 7:
	#Not all techniques are appropriate for every level of experience. Apply the techniques you understand and read up on the ones you don't.		#Not all techniques are appropriate for every level of experience. Apply the techniques you understand and read up on the ones you don't.
	#Not all techniques are appropriate for every server. If you use a shared server, you must depend on the settings established by your hosting provider. If you are using a virtual or dedicated server, you can apply more creative security tactics.		#Not all techniques are appropriate for every server. If you use a shared server, you must depend on the settings established by your hosting provider. If you are using a virtual or dedicated server, you can apply more creative security tactics.
	#Not all security tactics are appropriate for all versions of Joomla. Where a technique applies to only one version it is noted by one of the following icons: {{JVer/multi\|1.0,1.5,1.6,1.7,2.5,3.0}}		#Not all security tactics are appropriate for all versions of Joomla. Where a technique applies to only one version it is noted by one of the following icons: {{JVer/multi\|1.0,1.5,1.6,1.7,2.5,3.0,3.1}}

	=== The most important guidelines===		=== The most important guidelines===

Topazgb: /* The good news */ edit link

2013-03-23T21:25:13Z

The good news: edit link

← Older revision		Revision as of 21:25, 23 March 2013
Line 41:		Line 41:
	#'''Even a beginner can start at the head of the herd''' User forums for many systems are clogged with [http://www.google.com/search?q=Help!+I've+been+hacked Help! I've been hacked] posts by people who did NOT follow standard security practices. If you are studying this checklist before your site is attacked, congratulations, you're already ahead of the herd.		#'''Even a beginner can start at the head of the herd''' User forums for many systems are clogged with [http://www.google.com/search?q=Help!+I've+been+hacked Help! I've been hacked] posts by people who did NOT follow standard security practices. If you are studying this checklist before your site is attacked, congratulations, you're already ahead of the herd.
	#'''It's not as hard as it looks''' If this is one of your first websites, security issues may seem overwhelming, but you don't have to deal with all of them at once. Start with the most critical issues. As you become more familiar with [http://www.gnu.org GNU] tools and techniques, including [http://www.gnu.org/ GNU/Linux], [http://www.apache.org Apache], [http://www.mysql.com MySQL], [http://en.wikipedia.org/wiki/SQL SQL], [http://www.php.net PHP], [http://en.wikipedia.org/wiki/HTTP HTTP], [http://en.wikipedia.org/wiki/CSS CSS], [http://en.wikipedia.org/wiki/XML XML], [http://en.wikipedia.org/wiki/RSS RSS], [http://en.wikipedia.org/wiki/TCP/IP TCP/IP], [http://en.wikipedia.org/wiki/FTP FTP], [http://subversion.tigris.org/ Subversion], [http://en.wikipedia.org/wiki/JavaScript JavaScript], and [http://www.joomla.org Joomla!], you'll add refinements to your set of security tactics.		#'''It's not as hard as it looks''' If this is one of your first websites, security issues may seem overwhelming, but you don't have to deal with all of them at once. Start with the most critical issues. As you become more familiar with [http://www.gnu.org GNU] tools and techniques, including [http://www.gnu.org/ GNU/Linux], [http://www.apache.org Apache], [http://www.mysql.com MySQL], [http://en.wikipedia.org/wiki/SQL SQL], [http://www.php.net PHP], [http://en.wikipedia.org/wiki/HTTP HTTP], [http://en.wikipedia.org/wiki/CSS CSS], [http://en.wikipedia.org/wiki/XML XML], [http://en.wikipedia.org/wiki/RSS RSS], [http://en.wikipedia.org/wiki/TCP/IP TCP/IP], [http://en.wikipedia.org/wiki/FTP FTP], [http://subversion.tigris.org/ Subversion], [http://en.wikipedia.org/wiki/JavaScript JavaScript], and [http://www.joomla.org Joomla!], you'll add refinements to your set of security tactics.
	#'''You can get help''' If you believe your website was attacked, '''do not''' simply post an announcement with full details in the Joomla! forums. If you are dealing with a new vulnerability or new form of attack, publishing that information could put other websites at risk. Instead, report possible security vulnerabilities to the [http://developer.joomla.org/security~~/contact-the-team.html~~ Joomla! Security Task Force].		#'''You can get help''' If you believe your website was attacked, '''do not''' simply post an announcement with full details in the Joomla! forums. If you are dealing with a new vulnerability or new form of attack, publishing that information could put other websites at risk. Instead, report possible security vulnerabilities to the [http://developer.joomla.org/security Joomla! Security Task Force].

	<!-- KEEP THIS AT THE END OF THE PAGE -->		<!-- KEEP THIS AT THE END OF THE PAGE -->
	[[Category:Security Checklist]]		[[Category:Security Checklist]]

Tom Hutchison: update navigational call

2012-10-16T00:59:24Z

update navigational call

← Older revision		Revision as of 00:59, 16 October 2012
Line 1:		Line 1:
	{{:Security Checklist}}		{{:Security Checklist/TOC}}
	=== Security matters ===		=== Security matters ===

Tom Hutchison: removed ==Read Me First == heading

2012-10-14T22:46:43Z

removed ==Read Me First == heading

← Older revision		Revision as of 22:46, 14 October 2012
Line 1:		Line 1:
	{{:Security Checklist}}		{{:Security Checklist}}
	~~==Read Me First==~~
	=== Security matters ===		=== Security matters ===

← Older revision		Revision as of 19:55, 4 April 2020
Line 1:		Line 1:
	<noinclude><languages /></noinclude>		<noinclude><languages /></noinclude>
	{{:Security Checklist/TOC/<translate>en</translate>}}		{{:Security Checklist/TOC/<translate><!--T:1--> en</translate>}}
	<translate>=== Security matters ===</translate>		<translate>=== Security matters === <!--T:2--></translate>

	:<translate>Internet security is a fast moving challenge and ever present threat. There is no one right way to secure a website, and all security methods are subject to instant obsolescence, incremental improvement, and constant revision. All public facing websites are open to constant attack. Are you willing and able to invest the time it takes to administer a dynamic, 24x7, world-accessible, database-driven, interactive, user-authenticated website? Do you have the time and resources to respond to the constant flow of new Internet security issues? The [[Top 10 Stupidest Administrator Tricks]] is a comic/tragic look at what can go wrong. Don't learn these tricks the hard way! Depending on your own experience, reading the ''Stupidest Tricks'' will either make you laugh or cry. Luckily, there are some well-established principles upon which to base your defensive plans. The following checklists point you toward current best practices for Joomla security.</translate>		:<translate><!--T:3--> Internet security is a fast moving challenge and ever present threat. There is no one right way to secure a website, and all security methods are subject to instant obsolescence, incremental improvement, and constant revision. All public facing websites are open to constant attack. Are you willing and able to invest the time it takes to administer a dynamic, 24x7, world-accessible, database-driven, interactive, user-authenticated website? Do you have the time and resources to respond to the constant flow of new Internet security issues? The [[Top 10 Stupidest Administrator Tricks]] is a comic/tragic look at what can go wrong. Don't learn these tricks the hard way! Depending on your own experience, reading the ''Stupidest Tricks'' will either make you laugh or cry. Luckily, there are some well-established principles upon which to base your defensive plans. The following checklists point you toward current best practices for Joomla security.</translate>

	<translate>=== How to read these documents ===</translate>		<translate>=== How to read these documents === <!--T:4--></translate>
	# <translate>Not all techniques are appropriate for every level of experience. Apply the techniques you understand and read up on the ones you don't.</translate>		# <translate><!--T:5--> Not all techniques are appropriate for every level of experience. Apply the techniques you understand and read up on the ones you don't.</translate>
	# <translate>Not all techniques are appropriate for every server. If you use a shared server, you must depend on the settings established by your hosting provider. If you are using a virtual or dedicated server, you can apply more creative security tactics.</translate>		# <translate><!--T:6--> Not all techniques are appropriate for every server. If you use a shared server, you must depend on the settings established by your hosting provider. If you are using a virtual or dedicated server, you can apply more creative security tactics.</translate>
	# <translate>Not all security tactics are appropriate for all versions of Joomla. Where a technique applies to only one version it is noted by one of the following icons:</translate> {{JVer/multi\|1.0,1.5,1.6,1.7,2.5,3.0,3.1}}		# <translate><!--T:7--> Not all security tactics are appropriate for all versions of Joomla. Where a technique applies to only one version it is noted by one of the following icons:</translate> {{JVer/multi\|1.0,1.5,1.6,1.7,2.5,3.0,3.1}}

	<translate>=== The most important guidelines===</translate>		<translate>=== The most important guidelines=== <!--T:8--></translate>
	:<translate>These checklists are long and growing because the full plot is thick, complex, and expanding, but don't despair! Here are a few essential guidelines for securing any website. Following them will protect you from most catastrophes.</translate>		:<translate><!--T:9--> These checklists are long and growing because the full plot is thick, complex, and expanding, but don't despair! Here are a few essential guidelines for securing any website. Following them will protect you from most catastrophes.</translate>

	# <translate>'''Back up early and often:''' Set up (and use and test) a regular backup and recovery process. When done well, this ensures that you can recover from almost any imaginable disaster.</translate>		# <translate><!--T:10--> '''Back up early and often:''' Set up (and use and test) a regular backup and recovery process. When done well, this ensures that you can recover from almost any imaginable disaster.</translate>
	# <translate>'''Update early and often:''' Promptly update to the latest ''stable'' version of Joomla! and any installed third-party extensions. This ensures that your site is protected from the newest vulnerabilities as soon as a fix is released and from the latest attack methods as soon as a defense is developed.</translate>		# <translate><!--T:11--> '''Update early and often:''' Promptly update to the latest ''stable'' version of Joomla! and any installed third-party extensions. This ensures that your site is protected from the newest vulnerabilities as soon as a fix is released and from the latest attack methods as soon as a defense is developed.</translate>
	# <translate>'''Use a secure host''': Use a high-quality Web host. Do not be fooled by offers of 'unlimited bandwidth, unlimited hard drive space, unlimited databases, etc.</translate>		# <translate><!--T:12--> '''Use a secure host''': Use a high-quality Web host. Do not be fooled by offers of 'unlimited bandwidth, unlimited hard drive space, unlimited databases, etc.</translate>
	# <translate>'''Use the community''': Don't forget the truism, "If a deal is too good to be true, it is." It seems that nothing on Earth is unlimited--except perhaps the gullibility of fools and the greed of those who prey upon them. Consider hiring professional assistance if you have inadequate experience or knowledge in this area. One of the advantages of GNU software is that user support is free. Take good advantage of this by asking good questions within the [http://forum.joomla.org Joomla! Forums]. When doing so, be sure to use the the most appropriate board, such as Installation, Migration and Updating, Administration.</translate>		# <translate><!--T:13--> '''Use the community''': Don't forget the truism, "If a deal is too good to be true, it is." It seems that nothing on Earth is unlimited--except perhaps the gullibility of fools and the greed of those who prey upon them. Consider hiring professional assistance if you have inadequate experience or knowledge in this area. One of the advantages of GNU software is that user support is free. Take good advantage of this by asking good questions within the [http://forum.joomla.org Joomla! Forums]. When doing so, be sure to use the the most appropriate board, such as Installation, Migration and Updating, Administration.</translate>


	::<translate>The most helpful posts in the Joomla! Security Forum are converted into [[Security and Performance FAQs]]. Many of the items on this list are explained in much greater detail in the FAQs.</translate>		::<translate><!--T:14--> The most helpful posts in the Joomla! Security Forum are converted into [[Security and Performance FAQs]]. Many of the items on this list are explained in much greater detail in the FAQs.</translate>


	::<translate>You may want to read the excellent [[Beginners\|Absolute Beginners Guide to Joomla!]] It has wealth of tips and tricks presented in an easy to understand format. Even experienced Joomlaists find great ideas here.</translate>		::<translate><!--T:15--> You may want to read the excellent [[Beginners\|Absolute Beginners Guide to Joomla!]] It has wealth of tips and tricks presented in an easy to understand format. Even experienced Joomlaists find great ideas here.</translate>


	::<translate>Hunt down the many nuggets of wisdom found in the [http://forum.joomla.org Joomla! Forums], in particular the [http://forum.joomla.org/viewforum.php?f=714 Joomla! 3.x Security Forum] and the [http://forum.joomla.org/viewforum.php?f=621 Joomla! 2.x Security Forum].</translate>		::<translate><!--T:16--> Hunt down the many nuggets of wisdom found in the [http://forum.joomla.org Joomla! Forums], in particular the [http://forum.joomla.org/viewforum.php?f=714 Joomla! 3.x Security Forum] and the [http://forum.joomla.org/viewforum.php?f=621 Joomla! 2.x Security Forum].</translate>


	::<translate>To receive all Joomla security announcements, subscribe to Joomla Security News. There are several ways to subscribe: </translate>		::<translate><!--T:17--> To receive all Joomla security announcements, subscribe to Joomla Security News. There are several ways to subscribe: </translate>

	::# [http://feedburner.google.com/fb/a/mailverify?uri=JoomlaSecurityNews <translate>Automatic Email Notification</translate>]		::# [http://feedburner.google.com/fb/a/mailverify?uri=JoomlaSecurityNews <translate><!--T:18--> Automatic Email Notification</translate>]
	::# [http://feeds.joomla.org/JoomlaSecurityNews <translate>RSS feed</translate>].		::# [http://feeds.joomla.org/JoomlaSecurityNews <translate><!--T:19--> RSS feed</translate>].

	<translate>=== The bad news ===</translate>		<translate>=== The bad news === <!--T:20--></translate>
	# <translate>'''There is no perfect security on the Web!''' As economists would say, "There's no free lunch." Don't be fooled by Joomla's award winning ease-of-use. Maintaining a secure Web site on the open Internet is not easy. Maintaining adequate security requires a wide and ever-growing range of skills and knowledge, constant watchfulness, and a robust backup and recovery process.</translate>		# <translate><!--T:21--> '''There is no perfect security on the Web!''' As economists would say, "There's no free lunch." Don't be fooled by Joomla's award winning ease-of-use. Maintaining a secure Web site on the open Internet is not easy. Maintaining adequate security requires a wide and ever-growing range of skills and knowledge, constant watchfulness, and a robust backup and recovery process.</translate>
	# <translate>'''There's no one right way!''' Due to the variety and complexity of modern web systems, security issues can't be resolved with simple, one-size-fits-all solutions. You (or someone you trust) must learn enough about your server infrastructure to make valid security decisions. Strong security is a moving target. Today's expert might be tomorrow's victim. Welcome to the game...</translate>		# <translate><!--T:22--> '''There's no one right way!''' Due to the variety and complexity of modern web systems, security issues can't be resolved with simple, one-size-fits-all solutions. You (or someone you trust) must learn enough about your server infrastructure to make valid security decisions. Strong security is a moving target. Today's expert might be tomorrow's victim. Welcome to the game...</translate>
	# <translate>'''There's no substitute for experience!''' To secure your Web site, you must gain real experience (some of which will be bitter), or get experienced help from others. If you haven't invested the considerable time it takes to learn how to maintain a secure Web site, be sure you can consult with someone who has. Read this tongue-in-cheek description of the [[Top_10_Stupidest_Administrator_Tricks\|Top 10 Stupidest Administrator Tricks]] which illustrates typical, blow-by-blow examples of how to learn Web security the hard way.</translate>		# <translate><!--T:23--> '''There's no substitute for experience!''' To secure your Web site, you must gain real experience (some of which will be bitter), or get experienced help from others. If you haven't invested the considerable time it takes to learn how to maintain a secure Web site, be sure you can consult with someone who has. Read this tongue-in-cheek description of the [[Top_10_Stupidest_Administrator_Tricks\|Top 10 Stupidest Administrator Tricks]] which illustrates typical, blow-by-blow examples of how to learn Web security the hard way.</translate>

	<translate>=== The good news ===</translate>		<translate>=== The good news === <!--T:24--></translate>

	# <translate>'''Even a beginner can start at the head of the herd''' User forums for many systems are clogged with [http://www.google.com/search?q=Help!+I've+been+hacked Help! I've been hacked] posts by people who did NOT follow standard security practices. If you are studying this checklist before your site is attacked, congratulations, you're already ahead of the herd.</translate>		# <translate><!--T:25--> '''Even a beginner can start at the head of the herd''' User forums for many systems are clogged with [http://www.google.com/search?q=Help!+I've+been+hacked Help! I've been hacked] posts by people who did NOT follow standard security practices. If you are studying this checklist before your site is attacked, congratulations, you're already ahead of the herd.</translate>
	# <translate>'''It's not as hard as it looks''' If this is one of your first websites, security issues may seem overwhelming, but you don't have to deal with all of them at once. Start with the most critical issues. As you become more familiar with [http://www.gnu.org GNU] tools and techniques, including</translate> [http://www.gnu.org/ GNU/Linux], [http://www.apache.org Apache], [http://www.mysql.com MySQL], [http://en.wikipedia.org/wiki/SQL SQL], [http://www.php.net PHP], [http://en.wikipedia.org/wiki/HTTP HTTP], [http://en.wikipedia.org/wiki/CSS CSS], [http://en.wikipedia.org/wiki/XML XML], [http://en.wikipedia.org/wiki/RSS RSS], [http://en.wikipedia.org/wiki/TCP/IP TCP/IP], [http://en.wikipedia.org/wiki/FTP FTP], [http://subversion.tigris.org/ Subversion], [http://en.wikipedia.org/wiki/JavaScript JavaScript], <translate>and [http://www.joomla.org Joomla!], you'll add refinements to your set of security tactics.</translate>		# <translate><!--T:26--> '''It's not as hard as it looks''' If this is one of your first websites, security issues may seem overwhelming, but you don't have to deal with all of them at once. Start with the most critical issues. As you become more familiar with [http://www.gnu.org GNU] tools and techniques, including</translate> [http://www.gnu.org/ GNU/Linux], [http://www.apache.org Apache], [http://www.mysql.com MySQL], [http://en.wikipedia.org/wiki/SQL SQL], [http://www.php.net PHP], [http://en.wikipedia.org/wiki/HTTP HTTP], [http://en.wikipedia.org/wiki/CSS CSS], [http://en.wikipedia.org/wiki/XML XML], [http://en.wikipedia.org/wiki/RSS RSS], [http://en.wikipedia.org/wiki/TCP/IP TCP/IP], [http://en.wikipedia.org/wiki/FTP FTP], [http://subversion.tigris.org/ Subversion], [http://en.wikipedia.org/wiki/JavaScript JavaScript], <translate><!--T:27--> and [http://www.joomla.org Joomla!], you'll add refinements to your set of security tactics.</translate>
	# <translate>'''You can get help''' If you believe your website was attacked, '''do not''' simply post an announcement with full details in the Joomla! forums. If you are dealing with a new vulnerability or new form of attack, publishing that information could put other websites at risk. Instead, report possible security vulnerabilities to the [http://developer.joomla.org/security Joomla! Security Task Force].</translate>		# <translate><!--T:28--> '''You can get help''' If you believe your website was attacked, '''do not''' simply post an announcement with full details in the Joomla! forums. If you are dealing with a new vulnerability or new form of attack, publishing that information could put other websites at risk. Instead, report possible security vulnerabilities to the [http://developer.joomla.org/security Joomla! Security Task Force].</translate>

	<!-- KEEP THIS AT THE END OF THE PAGE -->		<!-- KEEP THIS AT THE END OF THE PAGE -->
	[[Category:Security Checklist]]		[[Category:Security Checklist]]