Search Results
| Search type | Search syntax |
|---|---|
| Tags | [tag] |
| Exact | "words here" |
| Author |
user:1234 user:me (yours) |
| Score |
score:3 (3+) score:0 (none) |
| Answers |
answers:3 (3+) answers:0 (none) isaccepted:yes hasaccepted:no inquestion:1234 |
| Views | views:250 |
| Code | code:"if (foo != bar)" |
| Sections |
title:apples body:"apples oranges" |
| URL | url:"*.example.com" |
| Saves | in:saves |
| Status |
closed:yes duplicate:no migrated:no wiki:no |
| Types |
is:question is:answer |
| Exclude |
-[tag] -apples |
| For more details on advanced search visit our help page | |
Results tagged with security
Search options answers only
not deleted
user 149
5
votes
Accepted
Since upgrade, dompdf.php is presenting a security risk?
CIVI-SA-2015-001 was a security release which removed dompdf.php from the CiviCRM installation, as it permitted attackers to read arbitrary files from your webserver. … A full list of recent CiviCRM security advisories is available at https://civicrm.org/advisory, and CiviCRM site administrators should sign up for security upgrade notifications …
- 9,892
5
votes
Accepted
Security Warning on Dashboard (pantheon / nginx)
See Drupal.org #2195947 - Security warning from Civi re exposed "files" directory for how this is addressed in CiviCRM StarterKit. … '/sites/all/extensions';
See also the relevant CiviCRM security advisory, CIVI-SA-2014-001 Risk of information disclosure. …
- 9,892
1
vote
Does anyone use CiviCRM behind a Web Application Firewall?
I've configured CiviCRM behind both Pound and NginX. Both worked perfectly well, no complaints. If there were any special configurations required, they can't have been troublesome enough to remember : …
- 9,892
6
votes
Accepted
How do I find more information about the ACL regression introduced in 4.6.7?
This issue is mitigated by the fact that only sites so configured are affected, but for sites affected the potential severity led us to make an out of schedule security release. … many smaller sites), you are not affected
If you are not using ACL functionality, you are not affected
If you did not upgrade to 4.6.7, you are not affected (but you should check you have applied the security …
- 9,892
7
votes
How to prevent fraud attempts on Contribution pages?
How hard this will be depends on how determined the service abuser is to adapt to the defenses you introduce, and how easy a target your site is compared to other sites available to the attacker. If y …
- 9,892
8
votes
How do I stop the new "Security Notifications" that civi pops up for upgrades
Here's how we handle it for our hosting clients -
Create a recurring item in your calendar for the CiviCRM security release dates, first and third Wednesday each month. … (We do the same for Drupal security releases.)
Be subscribed to the CiviCRM Security Advisories announce list. …
- 9,892
3
votes
Cron not working after forcing https
The most likely causes for breakage with this change are:
Cron job is pointing to HTTP only
curl by default will not follow 302 redirects, while wget will. If you're using curl, it won't work automa …
- 9,892