Questions tagged [security]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
2
votes
3answers
231 views

Best way to configure IDS?

Civicrm has a built-in layer of intrusion detection using a library called PHPIDS. Unfortunately, I often have to disable for webhooks and other things that get trapped. For example, using the ...
6
votes
2answers
84 views

Is there a way for a user to verify themselves when following a checksum link?

Use case: Email a checksum link to a user asking them to update their profile data. When that user clicks the checksum link, request that they fill out a couple of verification fields such as ...
4
votes
3answers
38 views

Is there a way to send an email about security updates?

In Drupal there is an option to have an email sent periodically when there are updates (in general, or only security updates) available: I know CiviCRM already checks for updates and obviously has ...
8
votes
3answers
236 views

Is there a way to encrypt a single field in Civi database?

To protect sensitive data - such as HIPAA info
6
votes
1answer
276 views

Since upgrade, dompdf.php is presenting a security risk?

Upgraded to 4.5 a few weeks back on Joomla 3.3.6 and everything is working fine, except for a warning that I see when I first access CiviCRM. Reads: Security Warning File /home/[directory]/...
7
votes
2answers
129 views

How is the restful API secured?

In order to access the API securely what do I need to do? Is it as simple as using https and letting my CMS manage session authentication?
12
votes
5answers
221 views

How do I prevent a user from adding contacts to ACL groups?

I have successfully set up CiviCRM ACLs so that only contacts within the group "NYC Team" have access to certain events. What I am trying to figure out is how to prevent low-level users from adding ...