Website Security

Website security is often neglected and usually considered after the damage is done. Webmasters don't have time (are not paid) to constantly update web scripts and ensure website security. Then one not-fine day the forgotten site gets defaced, compromised, used for malicious activities and what not else...

Neglected website security can ruin your site and online presence, not to mention business. It can even put you under cyber criminal investigation if your site has been used for web attacks, scams and / or other malicious activities which is very often the case.

Website security is not necessarily expensive nor time-demanding. If you stick to some basic principles you can have a healthy website without too much trouble. While a book can be (and has been) written about website security you should be fine by just:

Stick to as few web scripts as possible. If necessary, sacrifice some functionality but avoid installing exotic third party extensions. Having less scripts will ensure much easy update to newer versions. Try to stick only to software which you know how to update.
Regularly check for updates your web scripts.
Try to limit the admin access to your scripts only to your local IP.

The above general rules are universal and can be applied to anything from Joomla to Plone.