This is an archived forum and the content is probably no longer relevant, but is provided here for posterity.
The active forums are here.
January 05, 2012 4:58am
Subscribe [2]#1 / Jan 05, 2012 4:58am
One of our clients, a large construction company, want to beef up their Intranet, and the primary tool in our arsenal is ExpressionEngine.
However, Intranets are a different game in terms of security. We plan on hosting the entire site behind a password protected area in EE, and want to hand over regular EE updates to their IT department. But what other steps can be taken to ensure that security is top-grade?
Many thanks
#2 / Jan 05, 2012 7:00am
#3 / Jan 06, 2012 6:03pm
Update EE and your add-ons to the latest versions and keep them up-to-date.
You could host the site on a secure server (HTTPS) so everything’s encrypted. On a non-secure server there’s a possibility that usernames and passwords could be intercepted since they’re transmitted unencrypted.