CMS Security Handbook: The Comprehensive Guide for WordPress®, Joomla!®, Drupal™, and Plone®

Summary

This chapter has covered a lot of ground. Reading through this chapter a couple of times to ensure that you have a full understanding of the information presented is a good idea.

You learned about why and how you harden a server against attacks, which includes securing your Linux operating system and Apache web server. Other tasks that are often overlooked, but can be sources of trouble, include the open or closed ports, changing default passwords, and proper setup of FTP.

You learned about the importance of reviewing your logs, and how to establish a method to archive them. You also learned how to set up SSL, as well as how to review and test your mail servers to be sure they are not sending spam.

In Chapter 6, you'll work through the concept of developing a disaster recovery plan for when things go wrong with your website. The chapter will take you through the planning, writing, and testing phases. You'll finish up with a good framework to use when developing your own plan.