Skip to Content
CMS Security Handbook: The Comprehensive Guide for WordPress®, Joomla!®, Drupal™, and Plone®
book

CMS Security Handbook: The Comprehensive Guide for WordPress®, Joomla!®, Drupal™, and Plone®

by Tom Canavan
April 2011
Intermediate to advanced
432 pages
11h 1m
English
Wiley
Content preview from CMS Security Handbook: The Comprehensive Guide for WordPress®, Joomla!®, Drupal™, and Plone®

Contents

Introduction

Chapter 1 Introduction to CMS Security and Operations

Target Acquired

Operational Considerations

Educating Your Employees and End Users

Raising Security Awareness

Training on Information Security Policies

Providing a Standard Protocol for Threat Reporting

Ensuring E-mail Security

Applying Patches and Updates

Being Aware and Staying Safe

Looking at Your Site Through the Eyes of a Hacker

Steps to Gaining Access to Your Site

Researching

Googling Away

Using Google Hacking Tools (Dorks)

Footprinting

Using NMAP for Nefarious Means

Using Traceroute

Finding Subdomains

Enumeration

Attacking and Owning the Site

Wiping Out Their Tracks

Examples of Threats

Social Engineering

Calling into Your Office

Sending in a Trusted Friend

Using USB Keys

Indiscriminate Browsing or Instant Messaging

External Media

Vendors or External Clients/Customers as the Threat

Reviewing Your Perimeter

Using Virus Protection

Banning Passwords on Desks

Enforcing a Password Complexity and Change Policy

Policing Open Wireless

Tools for Wireless Detection

How Will You Respond to an Incident?

Does Your Plan Exist?

Is the Plan Up to Date?

Where Are Your Backup Tapes, Disks, and USBs?

Summary

Chapter 2 Choosing the Right Hosting Company

Types of Hosting Available

Shared Hosting

Virtual Private Server (VPS)

Dedicated Server

Cloud Hosting

Security of Data in a Cloud

Selecting the Right Hosting Option

Budget Considerations

Determining the Appropriate Server Size

Case 1: Light Website Traffic (Shared Hosting) ...

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Read now

Unlock full access

More than 5,000 organizations count on O’Reilly

AirBnbBlueOriginElectronic ArtsHomeDepotNasdaqRakutenTata Consultancy Services

QuotationMarkO’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.
Julian F.
Head of Cybersecurity
QuotationMarkI wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.
Addison B.
Field Engineer
QuotationMarkI’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.
Amir M.
Data Platform Tech Lead
QuotationMarkI'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
Mark W.
Embedded Software Engineer

You might also like

Preventing Web Attacks with Apache

Preventing Web Attacks with Apache

Ryan C. Barnett
What Successful Project Managers Do

What Successful Project Managers Do

W. Scott Cameron, Jeffrey S. Russell, Edward J. Hoffman, Alexander Laufer
How to Overcome a Power Deficit

How to Overcome a Power Deficit

Cyril Bouquet, Jean-Louis Barsoux

Publisher Resources

ISBN: 9780470916216Purchase book