5.0-Nano: Security features: Difference between revisions
Jump to navigation
Jump to search
m
Reverted edits by Upazixorys (Talk); changed back to last version by Ric
Upazixorys (talk | contribs) No edit summary |
m (Reverted edits by Upazixorys (Talk); changed back to last version by Ric) |
||
| Line 1: | Line 1: | ||
{{Nav 5.0-Nano}} | {{Nav 5.0-Nano}} | ||
'''Security features - Security Center''' | '''Security features - Security Center''' | ||
| Line 66: | Line 65: | ||
'''''[[#top | Top]]''''' | '''''[[#top | Top]]''''' | ||
==== Local View ==== | ==== Local View ==== | ||
{| cellpadding= | {| cellpadding="6" cellspacing="1" style="width:80%;background:#000000;" | ||
|- | |- | ||
|style= | |style="background:#f5f5f5;"| | ||
Due to the fact that some PC's have a different hostname set rather than localhost, we use the IP method here. This checks to make sure that you are viewing the Admin Panel (this) from local. | Due to the fact that some PC's have a different hostname set rather than localhost, we use the IP method here. This checks to make sure that you are viewing the Admin Panel (this) from local. | ||
|} | |} | ||
| Line 76: | Line 75: | ||
==== PHP Safe Mode ==== | ==== PHP Safe Mode ==== | ||
{| cellpadding= | {| cellpadding="6" cellspacing="1" style="width:80%;background:#000000;" | ||
|- | |- | ||
|style= | |style="background:#f5f5f5;"| | ||
This checks to see if PHP is running in SAFE MODE. Now, PHP does not have to run in SAFE MODE, but if you want the extra security, you can set it by clicking on the UNSECURE link. | This checks to see if PHP is running in SAFE MODE. Now, PHP does not have to run in SAFE MODE, but if you want the extra security, you can set it by clicking on the UNSECURE link. | ||
|} | |} | ||
| Line 86: | Line 85: | ||
==== Admin Panel Access ==== | ==== Admin Panel Access ==== | ||
{| cellpadding= | {| cellpadding="6" cellspacing="1" style="width:80%;background:#000000;" | ||
|- | |- | ||
|style= | |style="background:#f5f5f5;"| | ||
While this is another feature that is not throughly important as other features are in place against outside access to the Admin Panel, this checks to see if your Admin Panel is secured using the Auth method. Please change this by editing the C:/UniServer/home/admin/www/.htaccess file. | While this is another feature that is not throughly important as other features are in place against outside access to the Admin Panel, this checks to see if your Admin Panel is secured using the Auth method. Please change this by editing the C:/UniServer/home/admin/www/.htaccess file. | ||
|} | |} | ||
| Line 100: | Line 99: | ||
{| | {| | ||
|- | |- | ||
|'''1)''' Locate these lines:||& | |'''1)''' Locate these lines:|| ||'''2''') Uncomment the lines by removing the hash “#” as shown | ||
|- | |- | ||
| | | | ||
<pre> | |||
#AuthName | #AuthName "Uniform Server - Admin Panel 2.0" | ||
#AuthType Basic | #AuthType Basic | ||
#AuthUserFile C:/UniServer/htpasswd/home/admin/www/.htpasswd | #AuthUserFile C:/UniServer/htpasswd/home/admin/www/.htpasswd | ||
#Require valid-user | #Require valid-user | ||
</pre> | |||
| | | | ||
& | | ||
| | | | ||
<pre> | |||
AuthName | AuthName "Uniform Server - Admin Panel 2.0" | ||
AuthType Basic | AuthType Basic | ||
AuthUserFile C:/UniServer/htpasswd/home/admin/www/.htpasswd | AuthUserFile C:/UniServer/htpasswd/home/admin/www/.htpasswd | ||
Require valid-user | Require valid-user | ||
</pre> | |||
|} | |} | ||
Now every time you access Apanel you need to enter a name and password. | Now every time you access Apanel you need to enter a name and password. | ||
| Line 142: | Line 141: | ||
{| | {| | ||
|- | |- | ||
|'''1)''' Locate these lines:||& | |'''1)''' Locate these lines:|| ||'''2''') Disable local access only by commenting each line with an hash "#" as shown | ||
|- | |- | ||
| | | | ||
<pre> | |||
Order Deny,Allow | Order Deny,Allow | ||
Deny from all | Deny from all | ||
Allow from 127.0.0.1 | Allow from 127.0.0.1 | ||
</pre> | |||
| | | | ||
& | | ||
| | | | ||
<pre> | |||
#Order Deny,Allow | #Order Deny,Allow | ||
#Deny from all | #Deny from all | ||
#Allow from 127.0.0.1 | #Allow from 127.0.0.1 | ||
</pre> | |||
|} | |} | ||
'''''[[#top | Top]]''''' | '''''[[#top | Top]]''''' | ||
==== Server Access ==== | ==== Server Access ==== | ||
{| cellpadding= | {| cellpadding="6" cellspacing="1" style="width:80%;background:#000000;" | ||
|- | |- | ||
|style= | |style="background:#f5f5f5;"| | ||
If you are running your server in Production Mode, Skip this one. If not and you would like to add more security to the server by blocking it using the Auth method, then change this in by editing the C:/UniServer/www/.htaccess file. | If you are running your server in Production Mode, Skip this one. If not and you would like to add more security to the server by blocking it using the Auth method, then change this in by editing the C:/UniServer/www/.htaccess file. | ||
|} | |} | ||
| Line 176: | Line 175: | ||
{| | {| | ||
|- | |- | ||
|'''1)''' Locate these lines:||& | |'''1)''' Locate these lines:|| ||'''2''') Disable local access only by commenting each line with an hash "#" as shown | ||
|- | |- | ||
| | | | ||
<pre> | |||
Order Deny,Allow | Order Deny,Allow | ||
Deny from all | Deny from all | ||
Allow from 127.0.0.1 | Allow from 127.0.0.1 | ||
</pre> | |||
| | | | ||
& | | ||
| | | | ||
<pre> | |||
#Order Deny,Allow | #Order Deny,Allow | ||
#Deny from all | #Deny from all | ||
#Allow from 127.0.0.1 | #Allow from 127.0.0.1 | ||
</pre> | |||
|} | |} | ||
| Line 205: | Line 204: | ||
{| | {| | ||
|- | |- | ||
|'''1)''' Locate these lines:||& | |'''1)''' Locate these lines:|| ||'''2''') Uncomment the lines by removing the hash “#” as shown | ||
|- | |- | ||
| | | | ||
<pre> | |||
#AuthName | #AuthName "Uniform Server - Admin Panel 2.0" | ||
#AuthType Basic | #AuthType Basic | ||
#AuthUserFile C:/UniServer/htpasswd/home/admin/www/.htpasswd | #AuthUserFile C:/UniServer/htpasswd/home/admin/www/.htpasswd | ||
#Require valid-user | #Require valid-user | ||
</pre> | |||
| | | | ||
& | | ||
| | | | ||
<pre> | |||
AuthName | AuthName "Uniform Server - Admin Panel 2.0" | ||
AuthType Basic | AuthType Basic | ||
AuthUserFile C:/UniServer/htpasswd/home/admin/www/.htpasswd | AuthUserFile C:/UniServer/htpasswd/home/admin/www/.htpasswd | ||
Require valid-user | Require valid-user | ||
</pre> | |||
|} | |} | ||
Now every time a user browsers your server from either the Internet or Intranet is challenged for a name and password. | Now every time a user browsers your server from either the Internet or Intranet is challenged for a name and password. | ||
| Line 229: | Line 228: | ||
==== Server Access (SSL) ==== | ==== Server Access (SSL) ==== | ||
{| cellpadding= | {| cellpadding="6" cellspacing="1" style="width:80%;background:#000000;" | ||
|- | |- | ||
|style= | |style="background:#f5f5f5;"| | ||
If you are running your server in Production Mode, Skip this one. If not and you would like to add more security to the server by blocking it using the Auth method, then change this in by editing the C:/UniServer/ssl/.htaccess file. | If you are running your server in Production Mode, Skip this one. If not and you would like to add more security to the server by blocking it using the Auth method, then change this in by editing the C:/UniServer/ssl/.htaccess file. | ||
|} | |} | ||
| Line 243: | Line 242: | ||
{| | {| | ||
|- | |- | ||
|'''1)''' Locate these lines:||& | |'''1)''' Locate these lines:|| ||'''2''') Disable local access only by commenting each line with an hash "#" as shown | ||
|- | |- | ||
| | | | ||
<pre> | |||
Order Deny,Allow | Order Deny,Allow | ||
Deny from all | Deny from all | ||
Allow from 127.0.0.1 | Allow from 127.0.0.1 | ||
</pre> | |||
| | | | ||
& | | ||
| | | | ||
<pre> | |||
#Order Deny,Allow | #Order Deny,Allow | ||
#Deny from all | #Deny from all | ||
#Allow from 127.0.0.1 | #Allow from 127.0.0.1 | ||
</pre> | |||
|} | |} | ||
'''''Note'':''' No need to restart the server changes are Automatically picked up by Apache. | '''''Note'':''' No need to restart the server changes are Automatically picked up by Apache. | ||
| Line 270: | Line 269: | ||
{| | {| | ||
|- | |- | ||
|'''1)''' Locate these lines:||& | |'''1)''' Locate these lines:|| ||'''2''') Uncomment the lines by removing the hash “#” as shown | ||
|- | |- | ||
| | | | ||
<pre> | |||
#AuthName | #AuthName "Uniform Server - Admin Panel 2.0" | ||
#AuthType Basic | #AuthType Basic | ||
#AuthUserFile C:/UniServer/htpasswd/home/admin/www/.htpasswd | #AuthUserFile C:/UniServer/htpasswd/home/admin/www/.htpasswd | ||
#Require valid-user | #Require valid-user | ||
</pre> | |||
| | | | ||
& | | ||
| | | | ||
<pre> | |||
AuthName | AuthName "Uniform Server - Admin Panel 2.0" | ||
AuthType Basic | AuthType Basic | ||
AuthUserFile C:/UniServer/htpasswd/home/admin/www/.htpasswd | AuthUserFile C:/UniServer/htpasswd/home/admin/www/.htpasswd | ||
Require valid-user | Require valid-user | ||
</pre> | |||
|} | |} | ||
Now every time a user browsers your server from either the Internet or Intranet is challanged for a name and password. | Now every time a user browsers your server from either the Internet or Intranet is challanged for a name and password. | ||