|
lesson from this thread:
- restrict db access only to from known hosts (shut anonymous db access if you have that)
- use complex generated passwords for db login and anything else
- also should consider securing ssh/ftp access
- for commonly used scripts - customize them, change admin url if possible, use strict passwords
what else is missing?
|