You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
61 lines
3.4 KiB
61 lines
3.4 KiB
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
|
|
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
|
|
<head>
|
|
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
|
|
<title>Chamilo Security Guide</title><link rel="stylesheet" href="default.css" type="text/css" media="screen,projection" />
|
|
<link rel="shortcut icon" href="../favicon.ico" type="image/x-icon" />
|
|
<style type="text/css">
|
|
<!--
|
|
page { width: 21cm; height: 29.7cm; margin: 2cm }
|
|
pre { font-family: "Courier New", monospace }
|
|
p { margin-bottom: 0.21cm }
|
|
.code {margin: 1em 1em 1em 2em; padding: 0.5em; background-color: rgb(229, 229, 229); vertical-align: top; border: 1px solid #999999;}
|
|
-->
|
|
</style>
|
|
</head>
|
|
<body>
|
|
|
|
<div id="header1">
|
|
<h1>Chamilo 1.8.8.4 : Security Guide</h1>
|
|
</div>
|
|
|
|
<a href="index.html">Documentation</a> > Security Guide
|
|
<div id="outerframe">
|
|
<div id="main">
|
|
<p></p>
|
|
|
|
<p>We recommend you don't take security issues too lightly. Chamilo is security-audited at least once a year, but you're never too sure. This list is a work in progress. Feel free to recommend additional measures by sending us an e-mail at info@chamilo.org.</p>
|
|
|
|
<h2><b>Contents</b></h2>
|
|
<ol>
|
|
<li><a href="#1.Disclosing-server-info">Disclosing server info</a></li>
|
|
<li><a href="#2.Keeping-up-to-date">Keeping up to date</a></li>
|
|
<li><a href="#3.Using-safe-browsers">Using safe browsers</a></li>
|
|
</ol>
|
|
|
|
<h2><a name="1.Disclosing-server-info"></a>1. Disclosing server info</h2>
|
|
<p>
|
|
It is considered a safer behaviour not to disclose server information from your Chamilo page. In order to avoid both web server and PHP information disclosure, you might want to take the following actions:
|
|
<ul>
|
|
<li>Locate the <i>ServerTokens</i> setting inside your Apache configuration and set it to "Prod"</li>
|
|
<li>Locate the <i>ServerSignature</i> setting inside your Apache configuration and set it to "Off"</li>
|
|
<li>Locate the <i>expose_php</i> setting inside your PHP configuration and set it to "Off"</li>
|
|
<li>Reload Apache</li>
|
|
</ul>
|
|
</p>
|
|
|
|
<h2><a name="2.Keeping-up-to-date"></a>2. Keeping up to date</h2>
|
|
<p>
|
|
Make sure you check <a href="http://support.chamilo.org/projects/chamilo-18/wiki/Security_issues">our security issues page</a> from time to time.
|
|
Subscribe to our free security alerts mailing-list: <a href="http://lists.chamilo.org/listinfo/security">http://lists.chamilo.org/listinfo/security</a> or that you follow our security Twitter feed: <a href="http://twitter.com/chamilosecurity">http://twitter.com/chamilosecurity</a>.
|
|
</p>
|
|
|
|
<h2><a name="2.Using-safe-browsers"></a>3. Using safe browsers</h2>
|
|
<p> Additionnally to lacking the implementation of features that really improve the quality of your browsing the Internet, older browsers tend to have many unresolved security flaws. Using an old browser, you put in danger the security of your computer and the data it contains, but you can also put others in danger by letting crackers take control of it and attacking others.</p>
|
|
<p>To avoid being a risk to yourself and others, you should download and install a recent browser. We recommend <a href="http://www.getfirefox.com" target="_blank">the latest stable version of Firefox</a>.</p>
|
|
<hr />
|
|
<h2>Authors</h2>
|
|
<ul>
|
|
<li>Yannick Warnier, Zend Certified PHP Engineer, BeezNest Belgium SPRL, <a href="mailto:ywarnier@beeznest.net">ywarnier@beeznest.net</a></li>
|
|
</ul>
|
|
</body></html>
|
|
|