############################################
## enable apache served files compression
## http://developer.yahoo.com/performance/rules.html#gzip

# Insert filter on all content
SetOutputFilter DEFLATE
# Insert filter on selected content types only
AddOutputFilterByType DEFLATE text/html text/plain text/xml text/css text/javascript application/javascript

# Netscape 4.x has some problems…
BrowserMatch ^Mozilla/4 gzip-only-text/html

# Netscape 4.06-4.08 have some more problems
BrowserMatch ^Mozilla/4\.0[678] no-gzip

# MSIE masquerades as Netscape, but it is fine
BrowserMatch \bMSIE !no-gzip !gzip-only-text/html

# Don’t compress images
SetEnvIfNoCase Request_URI \.(?:gif|jpe?g|png)$ no-gzip dont-vary

# Make sure proxies don’t deliver the wrong content
Header append Vary User-Agent env=!dont-vary

############################################ 
## If running in cluster environment, uncomment this 
##http://developer.yahoo.com/performance/rules.html#etags

FileETag none

Have you done all the changes in Magento .htaccess files till now? If yes, now let's concentrate on the Magento Admin settings.

Through below mentioned settings, you can combine the CSS and JavaScript files that in turn can help you out in decreasing the http request and making the response quicker:

Magento is making use of the EAV model in order to store customer and product data. Allowing the Flat Catalog for categories as well as products combine product data into one single table that enhances the performance by responding to queries quickly. However, if you store has 1000+ products,  you should allow Flat Catalog Products.

- In the Magento Admin, go to System > Configuration > Catalog.

- Under “Frontend”, change “Use Flat Catalog Category” to YES.

- Under “Frontend”, change “Use Flat Catalog Product” to YES. (optional)

- Clear the cache.

Important Note: It may also break your store if custom extensions are being used, so make sure about it. However, Magento's application files are searched in the following order:

- app/code/local

- app/code/community

- app/code/core

- lib

Every single time when a page loads, this search is performed that result in different filesystem reads. The number of reads has been decreased by the Mage_Compiler by copying all the app files to a single include directory. Moreover, it also caches the most often used pages.

1. In the Magento Admin, go to System > Tools > Compilation.

2. Click “Run Compilation Process”

- In the Magento Admin, go to System > Configuration.

- In the left menu under Advanced, click system.

- Under “Log Cleaning”, you can change “Enable Log Cleaning” to “yes” and configure the Save log for 14 days:

From a database, you can manually clean up by logging into your Magento database and truncated the following tables:

- log_customer

- log_quote

- log_summary_type

- log_url

- log_url_info

- log_visitor

- log_visitor_info

- log_visitor_online

So, these are some few things that one can do to make their website faster. Along with it, you can also contact a professional Magento developer, who can help you to make your store insanely fast.

Thus, Magento is a perfect eCommerce platform that has been chosen from a wide range of payroll services. So, if you have decided to run a high-end and smooth online business, there is nothing better than Magento.

Convert your visitors into customers by creating magento eCommerce store.

Contact Us

Many a time, we need help outside developers to enhance Magento store. It is advisable to change your admin and FTP password before allowing them access and also change it again once the work is done. No matter you are keeping your Magento and FTP passwords safe, it doesn’t mean you’re hiring Magento Development Company kept safe like you.

Change Your File Permissions

 

You have to make sure that your folders and files are not writable except you. You just have to make some changes to your file permissions to 644 and folders to 755. Additionally, if you find 777 or 666, then fix it immediately. You can quickly do this by using below given snippet in SSH:

find . -type d -exec chmod 775 {} \;

find . -type f -exec chmod 664 {} \;

You will only find caution with the media and var folders which should remain 775. Note that this process can be a little tricky as file permissions are dependent upon your hosting environment and Magento version.

Use the Latest Version of Magento

The latest Magento versions come out to patch searched security risks in the software and thus, it is advisable to try updating and stable version as soon as possible.

Keep Updated Anti-Virus Software

There are many Magento store providers updated their anti-virus software once a quarter. However, you have to ensure to use commercial grade anti-virus software that updates on the daily basis, so hacker doesn’t set a key-logger on your laptop.

Don’t Make Mistake to Save Your Password on Your Device

In order to add an extra security level, you don’t have to allow your browser or password manager software to save your password on your device. There are cloud based services that can access all your passwords from any computer you want, however, their most sensitive data is out and hackers are waiting for catch. Keeping the password on your laptop (saving in word, excel) gets hacked or stolen.

Lockdown Your Magento Connect Manager

If you want to install this program quickly, then Magento’s Connect Manager is the best option. However, it also has a security risk due to the entry point for brute force attacks. It is recommended to change the /Downloader/ path just like an admin path to make it harder for hackers to crack your store. You can also restrict the new downloader path through IP address for extra security.

Choose Multifaceted & Long Admin Username and Password

It is recommended to choose almost impossible to crack username and password as there is a still a chance that a hacker will find your admin login page. Your password should be of at least 15 characters long that contain punctuation, numbers, a mixture of upper and lower case. Some of the examples are:

    oU^%aYKj*F{RM99hR

    Yh8:H:-cD&’4?F>

    )j%djk ~9cU=f[p[VBq4

Disable Any Unsafe PHP Functions

Ensure to add the following rule to your php.ini file: disable_functions = proc_open, phpinfo, show_source, system, shell_exec, passthru, exec, popen to avoid exploitation of the PHP functions that can be potentially unsafe.

Do not Use Your Magento Admin Password for Other Account

Ensure to have a 100% unique and solely dedicated Magento Admin password. It is advisable to avoid using the same password with other websites as it will invite hackers to get access to your usual password and thus, can be used to hack websites.

Restrict Admin Access to Only Approved IP Addresses

Another important precaution is to restrict admin access to only the IP addresses you have white listed. You can easily achieve via .htaccess, however, preferable is the Apache directive LocationMatch:

<code>

<LocationMatch "admin">

Order Deny,Allow

Deny from All

Allow from 10.10.10.0/24

</LocationMatch>

</code>

Use Secure FTP

Guess or intercept an FTP password is one of the simplest and easiest ways to hack a Magento eCommerce store. If you don’t want it happens to you, then simply use secure FTP passwords and FTP-SSL (Explicit AUTH TLS) or SFTP (SSH File Transfer Protocol). Even, for high security level, use SFTP and a Public Key Authentication.

Disable Directory Indexing

You have prevented a potential hacker from viewing all the files in a folder on your site to stop him/her to know what files you have in a particular folder that makes quite difficult for them to search the vulnerabilities in your site. You just have to add the following to your .htaccess file to prevent a potential hacker from seeing all the files located in a folder on your web server. You have to ensure to click on the return key to ensure that the file ends with a blank line.

Use Trusted Magento Extensions Only

Many advantages of an active community of developers and rule of security have been delivered by the Magento core code. But, the same doesn't apply to all the extensions that have been developed for it. Magento store takes vulnerability in one extension to deliver a hacker complete access and control over your website.

Thus, here we recommended you to use tested extensions that have proven track record of dependability. Moreover, you also have to update your extension like Magento store when new versions come out.

An Encrypted Connection is Must

Avoid sending data over an unencrypted connection. One might be more vulnerable to hackers, so unless to configure Magento to use secure logins. One can also have to need login information that can be sent over a secure connection by changing your setting available in the system configuration menu.

Avoid cPanels

No doubt cPanels serve well in managing your Emails, FTPs and monitor resources, but they really secure? When your cPanel is used by someone, it creates a threat to your data from hackers. If you are using cPanel then adding cloud hosting is best option to access admin panels and power dashboards on your custom Magento website.

Obscure Your Admin Path

If you have found your admin path like “your-site.com/admin” then you have made incredibly easy for hackers and password-guessing robots to guess your password. You can choose another word Instead of having the address end in “admin” to make the admin path more secure.

Utilize a Private Email

Magento will send your administrator’s password through email, if you have forgotten. Additionally, you have to use an email address, which is not publicly known to other people. Your mail address should be connected with a security question that it would be not possible for anyone to guess.

Secure Hosting

Using shared hosting seems like a good idea, however, when you setup your store, it is quite difficult to connect with something that is more secure and stable. With cloud hosting, you will get stability along with it saves you from being redundant. Your data is more secure with cloud hosting.

Backup Your Magento Store Regularly

One can have to backup their Magento files and database on a regular basis to minimize the amount of damage that an attack can cause. Ensure to remember to back up a different server than where your Magento store is hosted.

Update your PC Regularly

 

You would receive updates and new patches at regular basis, if you are part of Magento community. Such updates are needed to make sure your store and PC is secure at all times. With new patches that available in the community site will make your store secure.

So, these are some remarkable tips that help your Magento store stay away from hackers. If you want to develop a secure Magento website then contact Magento Design Studio.

Images designed by: freepik.com