Security best practices in TYPO3

TYPO3

Beschreibung

As a TYPO3 integrator I know the different types of security vulnerabilities and how to secure a TYPO3 installation.

Ziele

• I know the security-related configuration options in the TYPO3 Admin Tool (Install Tool), such as SSL, MFA, notifications, etc.
• I know how to configure backend users and secure logins.
• I know how to prevent SQL injections in TypoScript.
• I know where I find information about security updates for the TYPO3 Core and for third-party extensions.
• I know which log files I can review to analyse attacks and hack attempts.
• I know how to configure the Content Security Policy (CSP), for example to protect files in fileadmin.
• I know the required actions if I find a security vulnerability.
• I know the required actions if my TYPO3 instance appears to be compromised.

Maintainer

Oliver Thiele Web Development Oliver Thiele