How often is a Joomla web site hacked?

[burgerman]

I'm tempted to make a web site with Joomla but I've heard it can get hacked quite often. Is this true?

Do you have any person experience with your Joomla based site getting hacked?

Thanks

[JamesDavid]

From experience. I have had a few minisites hacked, just be sure to keep up on the new security updates....

[burgerman]

Thanks for the response JamesDavid. When your sites were hacked, what did the hackers do?

[JamesDavid]

http://mortgagequotes.biz/

perfect example,. just got hacked maybe a week ago.. shame too was more than paying for itself with revenue.....

I have never had a Joomla 1.0.xxxx site hacked, it was a really stable platform...... after they released 1.5.xxx I did a few minisites and they were hacked.. They seemed to have fixed it with the latest release and since I have started using the newest one which is like 1.7.xxx or something everything has been fine... Also I am sure if i new more about file permission and SQL access that I could tighten up security.....

What I dont understand is how some gets off and screwing with some little website on the net... I mean give me a break. it is just a bunch of noobs who dont have good enough skills to profit from them....

[Gerry]

Does anyone know what makes them so vulnerable to attack?

Been lucky thus far.

[ZeRohiLL]

Does anyone know what makes them so vulnerable to attack?

Been lucky thus far.

vulnerability in the php code. open source has a big target for hacking since the code is released.

[wussadotcom]

WP CMS is more secure IMHO and easier to handle.

[ZeRohiLL]

I've never had a WP site of mine hacked

[Carter]

I've never had a WP site of mine hacked

Agree.
Wp is more secure than Joomla.

[wussadotcom]

I've never had a WP site of mine hacked

vous a dit de façon

[fab]

I have had many sites, so far none of them Joomla. Always back up information, use all security measures as mentioned. Ther is a new security extension, which I've just added.

BTW, there are a few hackers forums. When I got hacked once, did a search on Google and found the forum, and the hacker with the problem and the fix.

I see he got this wordpress site as well - http://r3dmin.wordpress.com

Here's a discussion about this:
http://forum.joomla.org/viewtopic.php?f=432&t=316581

[copper]

I had one joomla based site hacked.
Luckily, hacker only changed config file.
Joomla is as secure as any other open source dev.
It was vulnerable when they came out one of the previous upgrade
and fixed real quickly. My hacked site was not updated with security patches.

[Makis77]

Joomla as is wont get hacked easily, if you add 3rd party components then you raise your chances getting hacked since no one can control those developers and furthemore many of them stop developing and updating their components so when a hole is found you are open to it.
In my opinion Joomla should judged based on the preinstalled components each release has and not based on any addons that people install.
Having this in mind my Joomla websites and my clients that bought from me Joomla services and Hosting as well have never been hacked.

[WebsiteTraders.Com]

drupal is a more secure option ............ many corporates use it.

[myst woman]

backup, then hacking is a problem but not a disaster. keep up the security upgrades.

[draggar]

http://mortgagequotes.biz/

perfect example,. just got hacked maybe a week ago.. shame too was more than paying for itself with revenue.....

Why don't people back up their sites? I have a local copy of every site that I have on my local computer so if this ever happens then I can spend 2-30 minutes uploading it and it's back.

[south]

http://sourceforge.net/projects/mod-security/

[Jeroen]

Don't let a possible hack withold you from developing a joomla site. There are a few good plugins available that can backup your site completely including the database. Using such a plugin will bring your site online in just minutes like Draggar wrote.

I'm using a plugin thats called 'joomlapack' or similar.