chamilo-lms/documentation/security.html

<html lang="en">
<head>
    <meta charset="utf-8" />
	<title>Chamilo Security Guide</title>
    <link rel="stylesheet" href="../main/css/base.css" type="text/css" media="screen,projection" />
    <link rel="stylesheet" href="default.css" type="text/css" media="screen,projection" />
	<link rel="shortcut icon" href="../favicon.ico" type="image/x-icon" />
	</head>
<body>
<div class="container">
<h1>Chamilo 1.8.8.4 : Security Guide</h1>

<a href="index.html">Documentation</a> &gt; Security Guide

<p>We recommend you don't take security issues too lightly. Chamilo is security-audited at least once a year, but you're never too sure. This list is a work in progress. Feel free to recommend additional measures by sending us an e-mail at info@chamilo.org.</p>

<h2><b>Contents</b></h2>
<ol>
  <li><a href="#1.Disclosing-server-info">Disclosing server info</a></li>
  <li><a href="#2.Keeping-up-to-date">Keeping up to date</a></li>
  <li><a href="#3.Using-safe-browsers">Using safe browsers</a></li>
</ol>

<h2><a name="1.Disclosing-server-info"></a>1. Disclosing server info</h2>
<p>
It is considered a safer behaviour not to disclose server information from your Chamilo page. In order to avoid both web server and PHP information disclosure, you might want to take the following actions:
<ul>
<li>Locate the <i>ServerTokens</i> setting inside your Apache configuration and set it to "Prod"</li>
<li>Locate the <i>ServerSignature</i> setting inside your Apache configuration and set it to "Off"</li>
<li>Locate the <i>expose_php</i> setting inside your PHP configuration and set it to "Off"</li>
<li>Reload Apache</li>
</ul>
</p>

<h2><a name="2.Keeping-up-to-date"></a>2. Keeping up to date</h2>
<p>
Make sure you check <a href="http://support.chamilo.org/projects/chamilo-18/wiki/Security_issues">our security issues page</a> from time to time.
Subscribe to our free security alerts mailing-list: <a href="http://lists.chamilo.org/listinfo/security">http://lists.chamilo.org/listinfo/security</a> or that you follow our security Twitter feed: <a href="http://twitter.com/chamilosecurity">http://twitter.com/chamilosecurity</a>.
</p>

<h2><a name="2.Using-safe-browsers"></a>3. Using safe browsers</h2>
<p> Additionnally to lacking the implementation of features that really improve the quality of your browsing the Internet, older browsers tend to have many unresolved security flaws. Using an old browser, you put in danger the security of your computer and the data it contains, but you can also put others in danger by letting crackers take control of it and attacking others.</p>
<p>To  avoid being a risk to yourself and others, you should download and install a recent browser. We recommend <a href="http://www.getfirefox.com" target="_blank">the latest stable version of Firefox</a>.</p>
<hr />
<h2>Authors</h2>
<ul>
<li>Yannick Warnier, Zend Certified PHP Engineer, BeezNest Belgium SPRL, <a href="mailto:ywarnier@beeznest.net">ywarnier@beeznest.net</a></li>
</ul>
</div>
</body>
</html>
Adding bootstrap to the documentation feel free to change/edit 13 years ago			`<html lang="en">`
			`<head>`
			`<meta charset="utf-8" />`
			`<title>Chamilo Security Guide</title>`
			`<link rel="stylesheet" href="../main/css/base.css" type="text/css" media="screen,projection" />`
			`<link rel="stylesheet" href="default.css" type="text/css" media="screen,projection" />`
Added security recommendations page 14 years ago			`<link rel="shortcut icon" href="../favicon.ico" type="image/x-icon" />`
			`</head>`
			`<body>`
Minor adding nice class definitions to the documentation 13 years ago			`<div class="container">`
Adding bootstrap to the documentation feel free to change/edit 13 years ago			`<h1>Chamilo 1.8.8.4 : Security Guide</h1>`
Added security recommendations page 14 years ago
			`<a href="index.html">Documentation</a> > Security Guide`

			`<p>We recommend you don't take security issues too lightly. Chamilo is security-audited at least once a year, but you're never too sure. This list is a work in progress. Feel free to recommend additional measures by sending us an e-mail at info@chamilo.org.</p>`

			`<h2><b>Contents</b></h2>`
			`<ol>`
			`<li><a href="#1.Disclosing-server-info">Disclosing server info</a></li>`
			`<li><a href="#2.Keeping-up-to-date">Keeping up to date</a></li>`
Updated security manual 14 years ago			`<li><a href="#3.Using-safe-browsers">Using safe browsers</a></li>`
Added security recommendations page 14 years ago			`</ol>`

Improved style of security and optimization guides 14 years ago			`<h2><a name="1.Disclosing-server-info"></a>1. Disclosing server info</h2>`
Added security recommendations page 14 years ago			`<p>`
			`It is considered a safer behaviour not to disclose server information from your Chamilo page. In order to avoid both web server and PHP information disclosure, you might want to take the following actions:`
			`<ul>`
			`<li>Locate the <i>ServerTokens</i> setting inside your Apache configuration and set it to "Prod"</li>`
			`<li>Locate the <i>ServerSignature</i> setting inside your Apache configuration and set it to "Off"</li>`
			`<li>Locate the <i>expose_php</i> setting inside your PHP configuration and set it to "Off"</li>`
			`<li>Reload Apache</li>`
			`</ul>`
			`</p>`

Improved style of security and optimization guides 14 years ago			`<h2><a name="2.Keeping-up-to-date"></a>2. Keeping up to date</h2>`
Added security recommendations page 14 years ago			`<p>`
			`Make sure you check <a href="http://support.chamilo.org/projects/chamilo-18/wiki/Security_issues">our security issues page</a> from time to time.`
			`Subscribe to our free security alerts mailing-list: <a href="http://lists.chamilo.org/listinfo/security">http://lists.chamilo.org/listinfo/security</a> or that you follow our security Twitter feed: <a href="http://twitter.com/chamilosecurity">http://twitter.com/chamilosecurity</a>.`
			`</p>`

Improved style of security and optimization guides 14 years ago			`<h2><a name="2.Using-safe-browsers"></a>3. Using safe browsers</h2>`
			`<p> Additionnally to lacking the implementation of features that really improve the quality of your browsing the Internet, older browsers tend to have many unresolved security flaws. Using an old browser, you put in danger the security of your computer and the data it contains, but you can also put others in danger by letting crackers take control of it and attacking others.</p>`
			`<p>To avoid being a risk to yourself and others, you should download and install a recent browser. We recommend <a href="http://www.getfirefox.com" target="_blank">the latest stable version of Firefox</a>.</p>`
Added security recommendations page 14 years ago			`<hr />`
			`<h2>Authors</h2>`
			`<ul>`
			`<li>Yannick Warnier, Zend Certified PHP Engineer, BeezNest Belgium SPRL, <a href="mailto:ywarnier@beeznest.net">ywarnier@beeznest.net</a></li>`
			`</ul>`
Minor adding nice class definitions to the documentation 13 years ago			`</div>`
			`</body>`
			`</html>`