2.3. Summary

Keeping your site and server infrastructure secure goes beyond just keeping Drupal up to date. You must configure your server properly and then keep the entire software stack up to date. This chapter was intended only to open your eyes to some of the potential problems outside Drupal. Many books are available that can guide you in proper server configuration and company policies for complete protection. Remember that it is nearly impossible to fully protect yourself from a dedicated and persistent attack.

When in doubt, educate yourself as much as possible, and hire experts to keep your infrastructure protected.