31,003
edits
Security information: Difference between revisions
Jump to navigation
Jump to search
m
→File:art.png Features
Tag: 2017 source edit |
Tag: 2017 source edit |
||
| Line 20: | Line 20: | ||
This is a list of main security features you can find : | This is a list of main security features you can find : | ||
'''Encryption''' | '''Encryption''' | ||
| Line 62: | Line 63: | ||
|} | |} | ||
'''Hacks and cracks''' | '''Hacks and cracks''' | ||
| Line 77: | Line 79: | ||
AcceptPathInfo Off | AcceptPathInfo Off | ||
</syntaxHighlight> | </syntaxHighlight> | ||
'''Pages and files access''' | '''Pages and files access''' | ||
| Line 83: | Line 86: | ||
*Files saved by Dolibarr are stored in a different root directory than web application (so they can't be downloaded without passing by the Dolibarr wrapper) <sup>[*3]</sup> <sup>[*10]</sup>. Note: You must check that you did not choose the "'''document'''" directory (for upload files) to be in same directory neither in a sub-directory than the "'''htdocs'''" directory. You web virtual host must point to the htdocs directory only. So any uploaded file (and store into the document directory can be called by forging a simple URL. | *Files saved by Dolibarr are stored in a different root directory than web application (so they can't be downloaded without passing by the Dolibarr wrapper) <sup>[*3]</sup> <sup>[*10]</sup>. Note: You must check that you did not choose the "'''document'''" directory (for upload files) to be in same directory neither in a sub-directory than the "'''htdocs'''" directory. You web virtual host must point to the htdocs directory only. So any uploaded file (and store into the document directory can be called by forging a simple URL. | ||
*Dolibarr directories content can't be accessed even if Apache option Indexes has been forgotten to on (should not) <sup>[*3]</sup>. | *Dolibarr directories content can't be accessed even if Apache option Indexes has been forgotten to on (should not) <sup>[*3]</sup>. | ||
'''Login protection''' | '''Login protection''' | ||