Support

Hello Rodra,

In order to protect your site, you have to first make sure that your site is not compromised to begin with. Following our "Unhacking your site" guide should allow you to do so.

After you ensure that your site is not compromised in any way, it's time to set up Admin Tools Professional. Begin by enabling all Web Application Firewall options (which is the default). Then, use the .htaccess Maker to generate a security-enhancing .htaccess file for your site.

Apart from that, note that security is a process; it is not something that you can set up once and get it over with. At the very least, you have to check that all of your extensions (component, modules, plugins and templates) are up-to-date. You can also check if any of your extensions are in the Vulnerable Extensions List. If they appear there in red, uninstall them at once; red means that the extension is insecure and there is not a known patch for it yet. If they appear in green, it means that you have to upgrade to the latest release, as earlier releases are known to have vulnerabilities. Uninstalling vulnerable extensions is necessary, since Admin Tools can do only so much to protect your site. In some cases, extensions completely bypass your site's index.php files, Admin Tools code doesn't run and you have a gaping security hole. In some other cases, the attack vector may be such that Admin Tools can not block it 100%, leaving a small possibility that your site may be compromised.