Web security has become increasingly challenging lately. Web development is seeing multilevel challenges from making the codes comprehensible to keeping them secure. No one wanted to see their creativity, hard work and dedication being compromised.
We, at J2Store, take security very seriously. J2store is built on top of the FOF framework and implements the best security practices advised by Joomla.
No Damage to the Payment inputs
When it comes to web security, a customer is much cautious and much worried about their bank credentials being shared online. Therefore raising a fence around this area is most crucial thing to do at the priority.
J2store does not store any credit card or any sensitive financial information of the customers in the database. We store only the email and the address of the customers. So even a compromise would not do any damage to your customers' information.
Here are some of the basic security features that we recommend that any website should have:
HTTPS (SSL ) - Is now mandatory for any internet site. Not having https affects your Google ranking as well. Google has officially said that sites with https will be given a better search ranking as it makes the communication of the site more secure.
More at https://webmasters.googleblog.com/2014/08/https-as-ranking-signal.html
An internal firewall: We recommend using the Admin Tools from Akeeba Backup.
The practice helps you prevent most of the common exploits on the internet and secures your website. There are aspects such as Cross-site scripting, CSRF, direct file access, uploads and more.
Keep the extensions in up-to-date:
Keeping a website updated means keeping it away from vulnerability. Make sure your Joomla and the extensions you use are current/up-to-date. Having old versions would make you vulnerable to exploits. So it's crucial to stay up-to-date all the time.
Use only what you need.
We do have this compelling nature to download all extensions and features to our website regardless of if we really need them. But it's better if you do not install tons of plugins/modules unnecessarily. Try to utilize the core features of Joomla to the maximum and only go for a third party extension when it is necessary. There are website owners who install several slideshow modules, content display modules. Having one is sufficient.
Backup, Backup, Backup!
The virtual world we live is not real, and we know that very much. Anything may go wrong at any time. Are we ready for this uncertainty? Regular Backup is must, and it will come as a life savior if things goes wrong. Always take a backup. If possible, automate the backup at regular intervals so that you can restore just in case of emergency. We recommend using the Akeeba Backup, the most famous backup tool for Joomla.
The following are optional (if you are concerned, you can go for it)
External Firewall
You can use an external firewall at the DNS level if you think your website needs double security layer. There are many available. Popular are Sucuri, Cloudfront
External DNS management
This is not an essential step. However, using an external DNS service gives you a lot of flexibility and also an improved security.
Web security is a broad topic. Though only a very few issues are discussed here, following those steps increases the chances of keeping one's website more secure and reducing the likelihood of security breach than before.
