Hardening
3 articles tagged Hardening, newest first.
How to Disable the Joomla API (and What Breaks When You Do)
Most Joomla sites never make an API call, yet /api/ answers on every one. Switch off Web Services, keep automated updates, and block it at the edge.
Your .htaccess Won't Stop a Joomla Hack
A hardened .htaccess feels safe, but Joomla attacks ride straight through index.php. Here is why the file protects far less than most site owners think.
How to Stop Any Plugin Installs in WordPress Admin
Add DISALLOW_FILE_MODS to wp-config.php to block plugin and theme installs in WordPress admin. Code snippet, wp-cli usage, and how to enforce it.