Loading...
 
Skip to main content

History: Security Admin

Source of version: 28

Copy to clipboard
            
!!Checking your server & Tiki settings 

On tiki-admin_security.php, you can check for less secure server or TikiWiki settings.
{img src="img/wiki_up/tiki-admin_security_check_server_and_tikiwiki_settings.png" }


!! Check your files
File check (at tiki-admin_security.php) will detect any PHP files (and .tpl files in recent versions of Tiki), but not images (.jpg, .gif, .png) which have been altered compared to the default, clean install of Tiki.

{img src="img/wiki_up/tiki-admin_security_file_check.png" }

It is normal that local.php be modified. If you check the file:
{img src="img/wiki_up/db_local_php_file_content.png" }

It is also normal that tiki-install.php be modified (as you probably clicked to de-activate it). All other modified files should have been by you.

Please note that if you ((dev:download|update your site via SVN)), it's normal that some files are reported because the secDB database is typically only updated at release time.

On more recent versions of Tiki, it's also normal that language files are flagged because they are compressed after the security check is done. This is solved starting in Tiki 9.2

Also, starting in Tiki 9.2, Tiki not only checks .php files but also .tpl, .css, .sql and .js 


!!Robots Exclusion (Banning Search engines)
For some uses you may wish to prevent search engines from crawling, indexing or archiving your site. 
See: ((Robots Exclusion Protocol)) and ((Meta Tags))

!!User/Content Security
see: ((Groups))

!! Securing your webserver
If you are using Apache webserver, you can also secure it (and therefore, secure tiki) by means on enabling "__mod_security__".

See ((ModSecurity)) for more information.


-=related=-
More info:
[http://tiki.org/AdminSecurity]

-=Alias names for this page=-
(alias(SecDB)) | (alias(SecurityAdmin)) | (alias(Security))
        

History

Advanced
Information Version
Marc Laporte 33
luciash d' being 🧙 32
luciash d' being 🧙 31
Bernard Sfez / Tiki Specialist Added a link to better documentation page. 30
Bernard Sfez / Tiki Specialist Information are incomplete and outdated 29
Yves Kipondo 28
Marc Laporte 27
Jean-Marc Libs 26
Marc Laporte .tpl are now tracked 25
Marc Laporte 24
Marc Laporte Too old 23
Xavier de Pedro 22
Marc Laporte 21
Marc Laporte 19
Marc Laporte hide old stuff 18
Marc Laporte 17
Marc Laporte 16
mrjcleaver 15
mlpvolt 14
Marc Laporte 13
Marc Laporte 12
Marc Laporte 11
Marc Laporte better image 10
Marc Laporte 9
Marc Laporte 8
Marc Laporte 7
Marc Laporte 6
Marc Laporte 5
Marc Laporte 4
Marc Laporte 3
Marc Laporte screenie 2
Marc Laporte 1