Identifying Areas of Trouble

Trouble on your website and systems can occur in many forms. In this part of your baseline report, you identify weaknesses and correct them. This may be in an out-of-date extension or a misconfigured setting. The goal is to get the information captured and the problems removed.

The areas of concern are the operating system (and add-ons), the CMS (and its add-ons), the server/hardware, and the network.

Checking the Operating System and Add-ons

By and large, next to your CMS, the operating system is an area where you should focus a large amount of attention. If you are not managing the updates, or if your host is not, then chances are good your system will have some vulnerability that could affect you.

Document the various installed applications and modules of your operating system, and record the information in your baseline report.

The following commands will enable you to determine the version numbers of the installed server modules MySQL, Apache, Java, PHP, Python, and the Linux Kernel:

  • MySQLmysql -v
  • Apachehttpd -v
  • Javajava - version
  • PHPphp - v
  • Pythonpython -v
  • Linuxcat /etc/*-rel*

image Note that all of these commands require you to log in to the shell (SSH) on your server.

The Linux command should work on many distributions. However, if it doesn't work, the following commands will likely provide you the information you seek. These ...

Get CMS Security Handbook: The Comprehensive Guide for WordPress®, Joomla!®, Drupal™, and Plone® now with O’Reilly online learning.

O’Reilly members experience live online training, plus books, videos, and digital content from 200+ publishers.