vannut / oc-security-plugin

:fallen_leaf: Harden and diagnose your OctoberCMS installation with a security layer and checks
Other
6 stars 1 forks source link

Discontinued? #3

Open zimudec opened 4 years ago

zimudec commented 4 years ago

I don't see another plugin about this, nor anyone who talks about this type of security on octobercms.

Was this plugin discontinued because it is no longer necessary?

vannut commented 4 years ago

Hi @zimudec Thanks for your interest in this plugin. Unfortunately I didn't have time to finish this plugin as our focus shifted and time got consumed by other projects....

I still believe this plugin could be of value for OctoberCMS as it would adres common configuration mistakes, adds security headers and tracks (core) file changes.

That said I don't know the exact status of OctoberCMS regarding this. Maybe @LukeTowers could chime in on the current need for this plugin.

zimudec commented 4 years ago

I get it. I think they are very necessary functions to maintain good system security from the backend, which should go in a plugin.

LukeTowers commented 4 years ago

What's the current functionality provided by this plugin?

zimudec commented 4 years ago

@LukeTowers These are some of the functions of the "Wordfence" plugin for Wordpress, where you can perform malware scanning, bad practices in security configurations that need to be changed, system files modified suspiciously, among others.

An easy layer of security to implement, which I have not seen on octobercms.

LukeTowers commented 4 years ago

@ayumi-cloud how does this fit in with the security plugin you've been developing?