Fork me on GitHub

Security centre questions  Bottom

  • There are parts of the Security centre settings that I'm not clear on.

    ...General Settings (no problem)
    ...Automatic Update (clear as a bell)

    .
    Host Settings

    Quote

    Time limit for authorisation keys ('authkeys') in seconds (default: 0)

    Does 0 equal "no expiration"? What is the effect of using other numbers of seconds.

    Quote

    Bind authkey to user agent ('UserAgent')

    Answers are yes/no, but what is the effect on Zikula when either is chosen?

    .
    Session settings
    What are the effects of the settings for these items? I have a general idea but don't really understand the real world affect on users when different settings are chosen.

    Quote

    Garbage collection probability

    Quote

    Use sessions for anonymous guests

    Quote

    Periodically regenerate session ID

    Quote

    Regenerate session ID during log-in and log-out

    Quote

    Regeneration probability


    .
    HTTP variable cleansing
    What exactly does the word "Sanitise" mean in this context?

    .
    Output filter settings
    What is the difference between "Internal output filter" and "SafeHTML"? And what exactly does each do to the content of the site?

    .
    AntiHacker
    On a Zikula 1.21 site I'm getting an email from antihacker every time I edit a pages page or a content item, even when logged in as Admin. Does AntiHacker have settings or whitelist?

    Thanks, probably a lot of dumb questions but someone had to ask.

    --
    Damon
    Catamaran Sailing at TheBeachcats.com

This list is based on users active over the last 60 minutes.