Wipe FTP Settings Clear in Joomla Configuration Set-Up- 🛠 Maintenance Monday Live Stream #048

Written by: Tim Davis Created: 16 July 2018

Category: Maintenance Monday

Hot!Hits: 1311Reading time: 02:02

Streamed live on Jul 17, 2018 Joomla Security

If at all possible, do not leave the FTP settings for your hosting account in your #Joomla configuration. Even if you have "Enable FTP" set to "no," your ftp details may still be in the actual configuration.php file of your Joomla install. Should your site be hacked and this info compromised, you could end up in the greatest world of hurt because hackers would then have full access your Joomla folder and present any number of types of hacks instead of your site. How to wipe your FTP settings clear in your Joomla configuration is what today's #maintenancemonday is all about.

00:00:00 – Stream Start & Episode Intro
00:01:02 – Why Wipe FTP Settings
00:01:54 – FTP on Older Servers
00:02:44 – Giveaway & Tool Overview
00:03:18 – Check Server Before Disabling
00:03:57 – Manual Edit: configuration.php
00:04:55 – Inside FTP Settings
00:05:32 – Disabling ≠ Removing Credentials
00:06:47 – How to Fully Clear FTP
00:08:09 – Automated Method with myJoomla
00:09:38 – Multi-Site FTP Security
00:10:00 – Summary & Best Practices
00:10:13 – Closing & Thanks

Summary

Introduction & Stream Context –
Episode introduces how to wipe FTP settings from Joomla configuration and explains the rebroadcast due to livestream technical issues.
Why FTP Settings Exist in Joomla –
Explanation of the historical FTP layer used for servers that lacked proper file permissions.
Security Risks of Stored FTP Credentials –
How exposed FTP credentials in configuration.php can allow attackers to access hosting files and fully compromise a Joomla site.
Checking Whether FTP Is Required –
Guidance on verifying if a site still needs FTP before disabling it to avoid breaking functionality or admin access.
Locating FTP Settings in configuration.php –
Demonstration of finding FTP host, username, password, and enable settings inside Joomla configuration files.
Manual Method: Removing FTP Credentials –
Step-by-step process of clearing FTP fields, disabling FTP properly, and ensuring credentials are permanently removed.
Testing After Removing FTP Settings –
Confirming site functionality remains intact and verifying that FTP data is no longer stored in Joomla configuration.
Automated Method Using myJoomla.com –
Using the myJoomla security audit and one-click fix tool to remove FTP configuration safely.
Managing Security Across Multiple Sites –
Advantages of using centralized tools like myJoomla to audit and secure multiple Joomla installations efficiently.
Final Security Advice & Wrap-Up –
Encouragement to remove unnecessary risks, maintain strong Joomla security practices, and support the channel and community.

Please send any feedback or bug reports or queries to;

Contact Tim Davis ► This email address is being protected from spambots. You need JavaScript enabled to view it.

Joomla Training Cohort ► https://cybersalt.com/jtc

JTC has been launched and is now accepting members https://cybersalt.com/services/subscriptions

mySites.guru ► https://mysites.guru

MigrateMe 4 ►https://www.php-web-design.com/Joomla-Components/fool-proof-migrations-from-joomla-3-to-joomla-4-x.html

Stageit for Joomla ► https://www.youtube.com/watch?v=4Xu4o0g2-RY&t=0s

Backing Up Your Joomla Site with Akeeba ►https://www.youtube.com/watch?v=4Xu4o0g2-RY&t=0s

FOLLOW US ON LinkedIn ►https://www.linkedin.com/in/cybersalt/

FOLLOW US ON X(TWITTER!) ► https://x.com/basicjoomla

LIKE US ON FACEBOOK! ► https://www.facebook.com/basicjoomla

SUBSCRIBE US ON YOUTUBE ►//www.youtube.com/@Basicjoomla

#joomla

#basicjoomla

#cybersalt