Protecting Your Joomla/Vmart Site

[jenkinhill]

You can usually add password protection .htaccess through the server control panel (cPanel, Plesk or whatever). To do it manually this old tutorial is still good: http://www.elated.com/articles/password-protecting-your-pages-with-htaccess/

[grisam]

Thanks for the reply. I apologize for my ignorance on this, but is there a tutorial which shows me how to password protect the admin folder via htaccess?

Thanks.

Here is one of many tutorials for this: http://www.sitedeveloper.ws/tutorials/htaccess.htm

[kenquad]

Or add captcha to the form should you wish to use this at some point.

Is there an easy way to do that with a module or something?  I've got a client who's receiving a ton of spam through that form, and he's getting irritated by it.

[PRO]

Or add captcha to the form should you wish to use this at some point.

Is there an easy way to do that with a module or something?  I've got a client who's receiving a ton of spam through that form, and he's getting irritated by it.

templates/pages/shop.ask.tpl
I did a few things for mine.
1st I changed the name and email text to pictures. So that bots do not know where to put where.

Then I added a 2 + 2 math question. Thats also a picture, and validated it with the same script the form already uses.

<label for="ziptie"><img style="vertical-align:middle" src="images/spampre.png"></label>
   <input type="text" name="ziptie" id="ziptie" size="10" class="inputbox" value="<?php echo $ziptie ?>"><br /><br />

else if ( ( document.emailForm.ziptie.value.search("4") ==-1 ) || ( document.emailForm.ziptie.value.search("4") ==-1 ) || ( document.emailForm.ziptie.value.search("4") ==-1 ) ) {
         alert( "Make sure the spam prevention question is correct" );

[kenquad]

Thank you so much for the detailed reply!  This code plugged in just dandy, and should stop those aut-spammers cold.  Thanks again for your time.

[AndrewBucklin]

Just wanted to add some information as an extra measure that will help protect the site from hackers and annoying spammers... Very easy, and doesn't require any core hacks.

It's called GeoBlocker.  It allows you to grant to deny access to the website based on countries, states / provinces, regions, zip codes / postal codes, and/or area codes.

http://extensions.joomla.org/extensions/access-a-security/site-access/ip-blocking/19441

http://xn--r1a3b.net/portfolio/GeoBlocker