12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758 |
- <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
- <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>Chamilo Security Guide</title><link rel="stylesheet" href="default.css" type="text/css" media="screen,projection" />
- <link rel="shortcut icon" href="../favicon.ico" type="image/x-icon" />
- <style type="text/css">
- <!--
- page { width: 21cm; height: 29.7cm; margin: 2cm }
- pre { font-family: "Courier New", monospace }
- p { margin-bottom: 0.21cm }
- .code {margin: 1em 1em 1em 2em; padding: 0.5em; background-color: rgb(229, 229, 229); vertical-align: top; border: 1px solid #999999;}
- -->
- </style>
- </head>
- <body>
- <div id="header1">
- <h1>Chamilo 1.8.8.2 : Security Guide</h1>
- </div>
- <a href="index.html">Documentation</a> > Security Guide
- <div id="outerframe">
- <div id="main">
- <p></p>
- <p>We recommend you don't take security issues too lightly. Chamilo is security-audited at least once a year, but you're never too sure. This list is a work in progress. Feel free to recommend additional measures by sending us an e-mail at info@chamilo.org.</p>
- <h2><b>Contents</b></h2>
- <ol>
- <li><a href="#1.Disclosing-server-info">Disclosing server info</a></li>
- <li><a href="#2.Keeping-up-to-date">Keeping up to date</a></li>
- <li><a href="#3.Using-safe-browsers">Using safe browsers</a></li>
- </ol>
- <h2><a name="1.Disclosing-server-info"></a>Disclosing server info</h2>
- <p>
- It is considered a safer behaviour not to disclose server information from your Chamilo page. In order to avoid both web server and PHP information disclosure, you might want to take the following actions:
- <ul>
- <li>Locate the <i>ServerTokens</i> setting inside your Apache configuration and set it to "Prod"</li>
- <li>Locate the <i>ServerSignature</i> setting inside your Apache configuration and set it to "Off"</li>
- <li>Locate the <i>expose_php</i> setting inside your PHP configuration and set it to "Off"</li>
- <li>Reload Apache</li>
- </ul>
- </p>
- <h2><a name="4.Keeping-up-to-date"></a>4. Keeping up to date</h2>
- <p>
- Make sure you check <a href="http://support.chamilo.org/projects/chamilo-18/wiki/Security_issues">our security issues page</a> from time to time.
- Subscribe to our free security alerts mailing-list: <a href="http://lists.chamilo.org/listinfo/security">http://lists.chamilo.org/listinfo/security</a> or that you follow our security Twitter feed: <a href="http://twitter.com/chamilosecurity">http://twitter.com/chamilosecurity</a>.
- </p>
- <hr />
- <h2>Authors</h2>
- <ul>
- <li>Yannick Warnier, Zend Certified PHP Engineer, BeezNest Belgium SPRL, <a href="mailto:ywarnier@beeznest.net">ywarnier@beeznest.net</a></li>
- </ul>
- </body></html>
|