是否值得为 Joomla 安全扩展付费？
我正在 Joomla 中完成我的第一个网站，它可能有 5 或 6 个表单（注册、登录、搜索、新闻……），我们还有对文章的评论、问题/答案部分、测试部分和一个表单发送短信。
我想知道根据您的经验和知识，我们是否应该（必须？）或不购买像 RSFirewall 这样的安全扩展之一！或 SecureLive 徽章和印章或任何其他。使用免费扩展并遵循 stackoverflow（或其他地方）中提供的建议/指南（php）来保护 joomla 制作的网站是否还不够？
预先感谢您的帮助（和时间）！
I'm finishing my first website in Joomla, it has maybe 5 or 6 forms (register, login, search, newletter, ...) and we also have comments on articles, a questions/answers section, tests section and a form to send sms.
I'd like to know according to your experience and knowledge if we should (must?) or not buy one of those security extensions like RSFirewall! or SecureLive Badges and Seals or any other. Is not enough protection using free extensions and following the advices/guides (php) provided in stackoverflow (or somewhere else) to protect joomla made websites ?
Thanks in advance for your help (and time)!
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（3）
我的意见是否定的。只要您聪明并保持软件更新，这些扩展就不会真正增加任何实用价值（无论如何，根据我的经验）。
遵循合理的原则，保持警惕，这比一周中任何一天的任何这些“工具”都更有价值。
My opinion is no. As long as you're smart and keep the software updated, those extensions don't really add any practical value (In my experience anyway).
Follow sound principals, and stay vigilant and that'll be worth more than any of these "tools" any day of the week.
Joomla 受到其社区的保护 :D 并保持更新，不要使用不推荐的扩展，或者如果可以的话根本避免使用扩展，你应该安全无忧！
虽然您还应该在服务器上查找其他内容，但因为如果有人喜欢破坏您的网站，他们需要访问文件服务器或/和数据库，而且他们如何到达那里并不重要，让您度过一段糟糕的时光！
Joomla is protected by its community :D and keep on updates and don't use not recommended Extensions or avoid using extension at all if you can, and you should be safe and sound!
While you should also look for other stuff on your server too, cause if someone likes to damage your site they need access to files server or/and database and it really dons't matter how they get there for you to have a Bad time!
对于我基于 joomla 的网站，我发现使用 基于云的安全解决方案（称为 incapsula）最有用，因为这也会阻止不同类型的垃圾邮件发送者，我可以使用此工具放大网站中的问题区域。有些解决方案内置 CDN，并且免费提供全部内容。
For my joomla based sites I found it most useful to use an cloud-based security solution called incapsula as this also blocks different types of spammers, and I can zoom in to problematic areas in my sites with this tool. Some solutions have built-in CDN, and they give it all for free.