Thread Rating:
  • 0 Vote(s) - 0 Average
  • 1
  • 2
  • 3
  • 4
  • 5
How i can have the best secure GetSimple?
#5
Thanks again, Connie.

i downloaded gsconfig.php file from my server and i opened it by notepad text-editor.
then i read here
http://get-simple.info/wiki/security
and also this important page
http://get-simple.info/wiki/how_to:chang...ord_salted
(i read it only now! there is a good step-by-step!)


so:


1 - at the first, i put username+password in "admin panel" in my GetSimple, so i logged.
and then i don't logout! i stay in login mode!


2 - in line numer 19 of gsconfig.php file, i find this code
#define('GSLOGINSALT', 'your_unique_phrase');

i must change all this line with a line created by
http://get-simple.info/api/security/

for example, and i must use (without # !! pay attention!!)
define('GSLOGINSALT', 'ZU^C%REVY02CfBlsqe~MOt--wfwPd|d3WTcrQWtFyR=j4uZ~uHo4vqD');


3 - in line numer 61 of gsconfig.php file, i find this code
#define('GSUSECUSTOMSALT', 'your_new_salt_value_here');

i must change all this line with a line created by
http://get-simple.info/api/security/

for example, and i must use (without # !! pay attention!!)
define('GSUSECUSTOMSALT', 'GfDsfUh05osw*hgS65 bc=sCUInKvrp^AQPd^21*-xBrb6WOKSyYif5');



4 - i put online this new gsconfig.php file and then i must change "admin password"
after these steps, i put online this new gsconfig.php file.
i'm still in "Login mode".
now simply i must change "admin password" by "admin panel" of GetSimple (i can re-use also the same password that i had before. but this step it is important because force the system to generate a password for new gsconfig.php file).

it is all correct?
nothing else?
Reply


Messages In This Thread
How i can have the best secure GetSimple? - by platinum - 2011-08-04, 19:30:06



Users browsing this thread: 2 Guest(s)