31,014
edits
Security information: Difference between revisions
Jump to navigation
Jump to search
m
→Fonctionnalités
m (→Alertes) |
|||
| Line 4: | Line 4: | ||
No security bugs known at the moment. | No security bugs known at the moment. | ||
= | = Features = | ||
Dolibarr | Dolibarr implements a several security features. Among them : | ||
* | * No passwords in logs, even technical logs. | ||
* | * Passwords can be crypted in database. | ||
* | * Password can be encoded in the Dolibarr configuration file (conf.php). | ||
* | * Anti SQL injection mechanism. | ||
* Support | * Support or not ofr PHP safe_mode. | ||
* | * Files saved by application are stored in a different root directory than web application (so they can not be downloaded without passing by the Dolibarr wrapper). | ||
* Pages | * Pages and contents are protected by permissions by groups or by users for each functionnal module (this feature is the only module you can't disable in Dolibarr). | ||
* | * Delay anti brute force cracking on login page. | ||
* | * Graphical code against robots on login page. | ||
* | * Logger to save permanently all Dolibarr events, like successful or failed logins. | ||
* | * Possibility to force HTTPS. | ||
* | * Possibility to run an anti-virus on every uploaded file. | ||