安全信息: Difference between revisions

Jump to navigation Jump to search

安全信息 (view source)

Revision as of 02:48, 1 July 2023

84 bytes removed ,  3 years ago
初始化
VisualWikitext
m (Adding interlang links (links to translated versions of this page in other languages) triggered by origin English page "Security_information" update.)
(初始化)
Line 19: Line 19:
[[Category:Admin_en]]
[[Category:Admin_en]]


=[[File:securite.png]] Alerts=
=[[File:securite.png]] 警报=
Last update: {{REVISIONYEAR}}-{{REVISIONMONTH}}-{{REVISIONDAY}}
最后更新: {{REVISIONYEAR}}-{{REVISIONMONTH}}-{{REVISIONDAY}}


A vulnerability allowing a user to get the list of the contacts (retreiving the lastname, firstname and the id of contact in database) has been discovered.
发现了一个允许用户获取联系人列表（检索数据库中联系人的姓氏、名字和 ID）的漏洞。 已经在 {{Template:SafeVersion}} 及更高版本中修复。
Fix is available into {{Template:SafeVersion}} and higher versions.


Note: You can also download from GitHub the '''intermediate''' versions (not yet released maintenance package) for all branches/version (https://github.com/Dolibarr/dolibarr/)
注意：您还可以从 GitHub(https://github.com/Dolibarr/dolibarr/) 下载所有分支/版本的'''中间版本'''（尚未发布的维护包）


=[[File:art.png]] Security Features=
=[[File:art.png]] 安全特性=
Dolibarr implements several security features to match best practices rules related to security.
Dolibarr 实现了多种安全功能，以匹配与安全相关的最佳实践规则。
   
   
This is a list of main security features you can find :
以下是您可以找到的主要安全功能列表：




'''Encryption'''
'''加密'''


*Passwords or security keys data are encrypted in database <sup>[*7]</sup> <sup>[*8]</sup>.
*数据库中保存的密码或安全密钥数据是加密之后的 <sup>[*7]</sup> <sup>[*8]</sup>。
*The database technical password can be obfuscated into the [[Configuration_file|Dolibarr configuration file]] (conf.php) <sup>[*8]</sup>.
*数据库技术密码可以被伪装到 [[Configuration_file|Dolibarr configuration file]] (conf.php) <sup>[*8]</sup>文件中。
*Possibility to force HTTPS <sup>[*9]</sup>.
*可以强制使用 HTTPS <sup>[*9]</sup>。


<syntaxhighlight lang="PHP">
<syntaxhighlight lang="PHP">
Line 53: Line 52:
0
0
| style="width:50%;" |
| style="width:50%;" |
No forced redirect
无强制重定向


|-
|-
Line 59: Line 58:
1
1
| style="width:50%;" |
| style="width:50%;" |
Force redirect to https, until SCRIPT_URI start with https into response
强制重定向到 https，直到 response 中的 SCRIPT_URI 以 https 开头


|-
|-
Line 65: Line 64:
2
2
| style="width:50%;" |
| style="width:50%;" |
Force redirect to https, until SERVER["HTTPS"] is 'on' into response
强制重定向到 https，直到 response 中的 SERVER[“HTTPS”] = 'on'


|-
|-
Line 71: Line 70:
https://mydomain
https://mydomain
| style="width:50%;" |
| style="width:50%;" |
Force redirect to the https domain name mydomain (recommended method)
强制重定向到 https 域名 mydomain（推荐方法）


|}
|}
ShengGang
714

edits

Retrieved from "https://wiki.dolibarr.org/index.php/Special:MobileDiff/56951"

Navigation menu