Unfortunately, the username and password you have entered do not match!
Not a member? Register | Lost your password?
Forgot your username? | Login with order number
Close Panel

Registration

Unfortunately, this username is already taken!

Unfortunately, this e-mail address is already used!

Please retype the verification code.

All fields are required

Close Panel

.htaccess protection?

Welcome, Guest
Username Password: Remember me
Forgot your password? Forgot your username? Create an account
RSJoomla! Forum
Joomla! Security
RSFirewall!

.htaccess protection?
(1 viewing) (1) Guest
Reply Topic
New Topic
  • Page:
  • 1

TOPIC: .htaccess protection?

.htaccess protection? 1 year, 9 months ago #10389

Hi,

I have a site that gets attacked by hackers once every few months, specifically targeting Joomla files. Last week I installed RSfirewall and fixed a bunch of permissions problems.

However, it got hacked again today. Turns out this time instead of replacing various Joomla files like they usually do, they replaced the htaccess file.

Would it be possible for RSFirewall to also make note of changes to and permissions for the htaccess file, even though it's outside Joomla? It would be great if it could take a snapshot of the file and note changes. I probably would've have discovered the source of the problem a bit earlier if this was under its scope.

Installing RSFirewall last week probably saved some of the joomla files, however, as the pattern of this attack was similar to the previous ones and there was as usual a bogus "copyrights.php" file in the root. It would be nice to be able to keep hackers totally out of my root directory.
Reply Quote

Re:.htaccess protection? 1 year, 9 months ago #10395

  • alexp
  • OFFLINE
  • Moderator
  • Posts: 1047
Hello,

Unfortunately there is no real way of keeping track of changes made on the htaccess file, since this is used to perform all kind of settings.

We currently have on our TO DO list a feature that will take into consideration the htaccess file also.

It would be best to also follow the security points stated on our blog:

http://www.rsjoomla.com/blog/joomla-webs...ked-what-s-next.html
Please note: my help is not official customer support. To receive your support, submit a ticket by clicking here
Regards,
RSJoomla! Development Team
Reply Quote

Re:.htaccess protection? 1 year, 8 months ago #10551

  • jwhite47
  • OFFLINE
  • Fresh Boarder
  • Posts: 7
What about changing the file from .htaccess to something else within httpd.conf file? That why it will trick or at least slow down the hackers.


I never tested this but I think its worth a shot.

Regards,
John.
Reply Quote

Re:.htaccess protection? 1 year, 8 months ago #10602

  • hayatta
  • OFFLINE
  • Fresh Boarder
  • Posts: 10
jwhite47 wrote:
What about changing the file from .htaccess to something else within httpd.conf file? That why it will trick or at least slow down the hackers.


That's a good idea, I also wonder how.

By the way, have you tried adding .htaccess to the "Monitor the following files for changes" list?
It might work.
Reply Quote

Re:.htaccess protection? 1 year, 7 months ago #10675

I did set the userrights to 444 for .htaccess, so it is only readable. If you need to change it, you can put the userrights to 644 to change the content and set it back to 444.
Reply Quote

Re:.htaccess protection? 6 hours, 1 minute ago #0

Hello,
This is an automatically generated message.
We do not monitor these forums. The forum is provided to exchange information and experience with other users ONLY. Forum responses are not guaranteed.

However, please submit a ticket if you wish to receive our support. Our ticketing system is the only way of getting in touch with RSJoomla! and receiving the official RSJoomla! Customer Support.

For more information, the Support Policy is located here: http://www.rsjoomla.com/support-policy.html.

Thank You!
PLEASE NOTE: This topic is NOT locked and you can add replies to it. Other users are free to reply as well. This message has been generated by a bot and has no effect on the topic whatsoever.
Reply Quote
Reply Topic
New Topic
  • Page:
  • 1
RSJoomla! Forum
Joomla! Security
RSFirewall!
Moderators: alex, alexp, octavian, bogdanc, andreic
Powered by Kunena
Time to create page: 0.85 seconds
Feedback