Questions tagged [security]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
5
votes
2answers
382 views

How do I update CiviCRM following a security update?

I am getting a warning to update security. It says: New security release 4.7.9 is available. The site is currently running 4.7.3. How do I update it? Thanks. Melissa Brooklyn Commons ...
4
votes
3answers
356 views

How to prevent fraud attempts on Contribution pages?

An org I work with is reporting heavy fraudulent use (at least attempts to use -- it seems many are being declined in Auth.net, although some are getting through) of the CiviContribute form, despite ...
6
votes
2answers
2k views

How do I set up an API key for a user?

The current documentation for creating an API key for user is on the wiki at https://wiki.civicrm.org/confluence/display/CRMDOC/REST+interface#RESTinterface-CreatingAPIkeysforusers. Unfortunately ...
5
votes
1answer
348 views

Files in the data directory (Upload | Custom)should not be downloadable. (Nginx)

I am running a drupal site on nginx and I have a civicrm set-up on this site. Whenever I login and goto civicrm dashboard, I am getting this warnings. I have tried searching solution for this, not ...
5
votes
4answers
338 views

Why did we lose contact data after deleting the default location type “Home”?

So we lost 2/3 of our email and addresses on 6/15 around 1pm. Everything else seemed fine. I was able to get the civi log that pointed to a deletion command (DELETE FROM civicrm_location_type) around ...
12
votes
5answers
221 views

How do I prevent a user from adding contacts to ACL groups?

I have successfully set up CiviCRM ACLs so that only contacts within the group "NYC Team" have access to certain events. What I am trying to figure out is how to prevent low-level users from adding ...
8
votes
3answers
236 views

Is there a way to encrypt a single field in Civi database?

To protect sensitive data - such as HIPAA info
5
votes
2answers
127 views

Installing CiviCRM - best security practices

I am new to CiviCRM and want to use it on a Joomla website. The question I have is how is the best way to make sure, that the CiviCRM user data is secure? I am thinking about installing CiviCRM in ...
3
votes
3answers
167 views

Security Warning on Dashboard (pantheon / nginx)

Getting Security warning everytime I log into civicrm that my log directory is downloadable. I checked and it is completely viewable on my browser. I realize that there is a solution for nginx ...
2
votes
4answers
87 views

Best way to integrate two sites with different security levels

We have a civi install that contains some sensitive data. We also have a public facing website. We would like to integrate them so that you can sign up for events, give donations etc on the website. ...
2
votes
1answer
41 views

What are the implications of changing the SITE_KEY?

See also Generating a new SITE_KEY If I change the SITE_KEY in civicrm.settings.php, what might stop working as a result? Eg: Will checksums emailed to contacts last week still be valid? (you're ...
1
vote
1answer
754 views

Call to undefined function dl() error w/Joomla 3.5.1 & PHP 7

I've just installed CiviCRM on a Joomla 3.5.1 site to learn how to use it. I am seeing an issue that I have a question about. As long as I use Php 5.6 the installation works properly. If I try to ...
0
votes
1answer
55 views

Why do I get security warning & how to remove?

User just got 3 security warnings about access to sites/default/files/civicrm/custom & sites/default/files/civicrm/upload & sites/default/files/civicrm/ConfigAndLog. I changed the access of ...