.png)
Zero Identity Forums - General - Web Security - Securing the cms
Are you bored? Check out the unaswered threads!
|
-Fbi-
 Member Female Body Inspector ;)  Trainee Joined: 27.12.2008 Last Seen: 10 year(s) ago Experience: 66.3 Points: 165 |
|
| #1 Securing the cms on January 13 2009 18:00 | |
|
Right, im making a project with my school m8, and we will be using php-fusion 6th version
 Yes yes... php-fusion. I know its crap but its only cms that has all the functions. And i mean look at this www.grafa.biz this is extreme-fusion heavily modded.We will mod ours up as well, it will be graphics and programming website, SO i would like some advice where should i start securing the system. Because it has alot of gaps where people can hack into easy. ----------------------------------- |
|
|
Grindordie
 Administrator Software Engineer  ZI Guru Joined: 04.11.2007 Last Seen: 10 year(s) ago Experience: 1074.3 Points: 1100 |
|
| #2 on January 13 2009 18:08 | |
|
PHP-Fusion is a great CMS, it has its security flaws like any other open-source CMS out there.
I would begin by altering the password hashing function and salting the passes. Possibly use sha2 as the encryption method. |
|
|
tancurrom
 Administrator Nibble  Advanced Analyst Joined: 03.04.2008 Last Seen: 10 year(s) ago Experience: 501.5 Points: 450 |
|
| #3 on January 13 2009 19:04 | |
|
I would start by using the most recent version (7)?
A Nibble = 1/2 a Byte 
|
|
|
hack4u
Administrator ZI Owner  ZI Guru Joined: 30.03.2008 Last Seen: 10 year(s) ago Experience: 19699.95 Points: 1285 |
|
| #4 on January 13 2009 22:43 | |
|
Quote from Grindordie PHP-Fusion is a great CMS, it has its security flaws like any other open-source CMS out there. I would begin by altering the password hashing function and salting the passes. Possibly use sha2 as the encryption method. yeah if you want to know how to secure PHPFusion listen to grind since he coded up HBH using Fusion as the template. they are pretty secure until Cheese starts coding and leaves them open 
  |
|
|
Grindordie
Administrator Software Engineer ZI Guru Joined: 04.11.2007 Last Seen: 10 year(s) ago Experience: 1074.3 Points: 1100 |
|
| #5 on January 14 2009 01:17 | |
|
No, it wasn't because of Cheese's coding.
The reason why HBH was hacked so many times is because it was always hosted on a shared host, and they were usually insecure.. Even if they restricted some php functions... whoever knew a little bit of Perl could bypass it. |
|
Who is watching forums
| Users viewing this page: | Guests (1) |
| Users viewing the forum: | 1 |