Announcement

  •  » Requests
  •  » Plugin "Check Files Integrity" should be integrated by default

#1 2018-09-26 18:33:12

wernfried
Member
2012-01-21
81

Plugin "Check Files Integrity" should be integrated by default

Hello

I would recommend to have plugin "Check Files Integrity" integrated as basic function. Whenever you run an update of Piwigo the update procedure should automatically check the integrity of installed files.

Best Regards
Wernfried

Offline

 

#2 2018-10-26 11:21:21

plg
Piwigo Team
Nantes, France, Europe
2002-04-05
13210

Re: Plugin "Check Files Integrity" should be integrated by default

Hi wernfried,

That's an idea I like :-) With a few issues:

* if you have a hacked file (for example include/config_defaults.inc.php) the Piwigo update may overwrite it and you would not see your Piwigo was hacked (but the hack would be partially erased)

* the current [extension by plg] Check Files Integrity does not check for "unexpected" files, and this is quite complicated because a plugin could perfectly add a directory in "_data" and that would not mean your Piwigo was hacked

* files local/config/*.php are not checked (and I write it publicly here because we know some hackers already know it and we have seen some modifications in database.inc.php)

Offline

 
  •  » Requests
  •  » Plugin "Check Files Integrity" should be integrated by default

Board footer

Powered by FluxBB

github twitter facebook google+ newsletter Donate Piwigo.org © 2002-2019 · Contact