Loading...
 

Table of contents

Checking your server & Tiki settings


On tiki-admin_security.php, you can check for less secure server or TikiWiki settings.
Image

Check your files

File check (at tiki-admin_security.php) will detect any PHP files (and .tpl files in recent versions of Tiki), but not images (.jpg, .gif, .png) which have been altered compared to the default, clean install of Tiki.

Image

It is normal that local.php be modified. If you check the file:
Image

It is also normal that tiki-install.php be modified (as you probably clicked to de-activate it). All other modified files should have been by you.

Please note that if you update your site via SVN, it's normal that some files are reported because the secDB database is typically only updated at release time.

On more recent versions of Tiki, it's also normal that language files are flagged because they are compressed after the security check is done. This is solved starting in Tiki 9.2

Also, starting in Tiki 9.2, Tiki not only checks .php files but also .tpl, .css, .sql and .js

Robots Exclusion (Banning Search engines)

For some uses you may wish to prevent search engines from crawling, indexing or archiving your site.
See: Robots Exclusion Protocol and Meta Tags

User/Content Security

see: Groups

Securing your webserver

If you are using Apache webserver, you can also secure it (and therefore, secure tiki) by means on enabling "mod_security".

See ModSecurity for more information.

related

More info:
http://tiki.org/AdminSecurity

Alias names for this page

SecDB | SecurityAdmin | Security

Created by: Last Modification: Wednesday 30 July, 2014 02:52:11 GMT-0000 by Marc Laporte
List Slides
Show php error messages