Xoops Italia :: Articolo
Articolo XML
http://www.xoopsitalia.org/modules/article/view.article.php/73/c18
2012-02-04T23:14:06+02:00
defkon1 at gmail dot com
ARTICLE @ XOOPS powered by FeedCreator
Installazione del Protector 3.x+
2008-07-03T13:14:17+02:00
2008-07-03T13:14:17+02:00
2008-07-03T13:14:17+02:00
http://www.xoopsitalia.org/modules/article/view.article.php/73/c18
slyss
Categoria: Sicurezza<br />Riassunto: Questa tematica è molto sentita e molti si confondono ancora con la vecchia procedura di installazione, che invece è radicalmente cambiata con l'inserimento del concetto di XOOPS_TRUST_PATH. Vediamo quindi come installare le nuove versioni di questo fondamentale strumento di protezione!E' stata rilasciata la <strong>VERSIONE 3 di PROTECTOR</strong><br /><br />Xoops Italia raccomanda l'installazione di questo modulo per proteggere il proprio<br />sito da eventuali attacchi.<br /><br /><br />---------------------------------------------------------------------------------<br /><br />INSTALLAZIONE DA ZERO (cioè senza nessuna versione vecchia di protector installata):<br /><br />---------------------------------------------------------------------------------<br /><br />Prima di tutto, definire XOOPS_TRUST_PATH nel mainfile.php<br />(se non è già stato inserito per qualche altro <a href="http://www.xoopsitalia.org/modules/news/article.php?storyid=681&keywords=XOOPS_TRUST_PATH" rel="external" title="">modulo D3</a>)<br /><br /><br />Inserite questa linea appena dopo la dichiarazione già presente della XOOPS_ROOT_PATH:<br /><br /><div class="xoopsCode"><code><code><span style="color: #000000">
<span style="color: #0000BB">define</span><span style="color: #007700">(</span><span style="color: #DD0000">'XOOPS_TRUST_PATH'</span><span style="color: #007700">,</span><span style="color: #DD0000">'/home/yourhome/xoops_trust_path'</span><span style="color: #007700">);</span><span style="color: #0000BB"></span>
</span>
</code></code></div><br /><br />Ora scaricatevi il pack del nuovo protector V3:<br /><a href="http://xoops.peak.ne.jp/md/mydownloads/singlefile.php?lid=94&cid=1" title="http://xoops.peak.ne.jp/md/mydownloads/singlefile.php?lid=94&cid=1" rel="external">http://xoops.peak.ne.jp/md/mydownloads/singlefile.php?lid=94&cid=1</a><br /><br /><br />Una volta scompattato vedrete presenti 2 cartelle: html e xoops_trust_path<br /><br />Come ho già spiegato (<a href="http://www.xoopsitalia.org/modules/smartsection/item.php?itemid=22#upload" rel="external" title="">qui</a>) al momento dell'installazione di xoops, era meglio avere la root del proprio sito xoops non nella radice del vostro dominio, ma installare xoops in una cartellina <strong>nome_cartellina</strong>.<br /><br />Infatti ora dobbiamo andare ad uplodare le due cartelle che abbiamo appena trovato dentro il pack scaricato V3.<br /><br />(*) Il contenuto della cartella html va inserito normalmente dentro la cartella modules come ogni altro modulo che avete caricato sul vostro sito.<br /><br />(*) La cartella xoops_trust_path va invece uplodata direttamente nella ROOT DEL VOSTRO DOMINIO e cioè alla stessa altezza della root del vostro sito xoops.<br /><br />Per capire meglio riporto questo esempio tratto dal sito di GIJOE:<br /><br /><div class="xoopsCode"><code><code><span style="color: #000000">
<span style="color: #0000BB"></span><span style="color: #007700">- </span><span style="color: #0000BB">html </span><span style="color: #007700">(</span><span style="color: #0000BB">reale tuo sito xoops</span><span style="color: #007700">)
<br />---- </span><span style="color: #0000BB">kernel
<br /></span><span style="color: #007700">---- class
<br />---- include
<br />---- </span><span style="color: #0000BB">modules
<br /></span><span style="color: #007700">-------- </span><span style="color: #0000BB">forum
<br /></span><span style="color: #007700">-------- </span><span style="color: #0000BB">myalbum
<br /></span><span style="color: #007700">-------- </span><span style="color: #0000BB">system
<br /></span><span style="color: #007700">-------- </span><span style="color: #0000BB">ecc</span><span style="color: #007700">...
<br />---- </span><span style="color: #0000BB">templates_c
<br /></span><span style="color: #007700">---- </span><span style="color: #0000BB">cache
<br /></span><span style="color: #007700">---- </span><span style="color: #0000BB">uploads
<br />
<br /></span><span style="color: #007700">- </span><span style="color: #0000BB">xoops_trust_path </span><span style="color: #007700">(</span><span style="color: #0000BB">fuori dalla root del tuo sito xoops e quindi dentro la root del tuo dominio</span><span style="color: #007700">)
<br />---- </span><span style="color: #0000BB">modules
<br /></span><span style="color: #007700">-------- </span><span style="color: #0000BB">forum
<br /></span><span style="color: #007700">-------- </span><span style="color: #0000BB">myalbum
<br /></span><span style="color: #007700">-------- </span><span style="color: #0000BB">system
<br /></span><span style="color: #007700">-------- </span><span style="color: #0000BB">ecc</span><span style="color: #007700">...
<br />---- </span><span style="color: #0000BB">uploads
<br /></span><span style="color: #007700">---- </span><span style="color: #0000BB">templates_c
<br /></span><span style="color: #007700">---- </span><span style="color: #0000BB">cache</span>
</span>
</code></code></div><br /><br />Copia html/modules/protector che trovi nel file scaricato dentro XOOPS_ROOT_PATH/modules/<br /><br />Copia xoops_trust_path/modules/protector che trovi nel file scaricato dentro XOOPS_TRUST_PATH/modules/<br /><br />Setta i permessi a 777 alla directory XOOPS_TRUST_PATH/modules/protector/configs <br /><br />Adesso installa Protector come un modulo normale.<br /><br />Ora modifica il tuo mainfile.php così:<br /><br /><div class="xoopsCode"><code><code><span style="color: #000000">
<span style="color: #0000BB"></span><span style="color: #007700">include </span><span style="color: #0000BB">XOOPS_TRUST_PATH</span><span style="color: #007700">.</span><span style="color: #DD0000">'/modules/protector/include/precheck.inc.php' </span><span style="color: #007700">;
<br /> if (!isset(</span><span style="color: #0000BB">$xoopsOption</span><span style="color: #007700">[</span><span style="color: #DD0000">'nocommon'</span><span style="color: #007700">]) && </span><span style="color: #0000BB">XOOPS_ROOT_PATH </span><span style="color: #007700">!= </span><span style="color: #DD0000">''</span><span style="color: #007700">) {
<br /> include </span><span style="color: #0000BB">XOOPS_ROOT_PATH</span><span style="color: #007700">.</span><span style="color: #DD0000">"/include/common.php"</span><span style="color: #007700">;
<br /> }
<br /> include </span><span style="color: #0000BB">XOOPS_TRUST_PATH</span><span style="color: #007700">.</span><span style="color: #DD0000">'/modules/protector/include/postcheck.inc.php' </span><span style="color: #007700">;</span><span style="color: #0000BB"></span>
</span>
</code></code></div><br /><br />Aggiungi le due linee rosse.<br />Se la parte blue è diversa nel tuo mainfile.php non ti preoccupare.<br /><br />= Sicurezza =<br /><br />Se per caso vieni bannato da Protector, devi semplicemente cancellare i file dentro XOOPS_TRUST_PATH/modules/protector/configs/<br /><br />La password da settare nelle preferenze (vecchie versioni) è stata eliminata.<br /><br /><br /><br />---------------------------------------------------------------------------------<br /><br />AGGIORNAMENTO DA PROTECTOR 2.x<br /><br />---------------------------------------------------------------------------------<br /><br />- rimuovi le 2 linee del protector dal mainfile.php<br />- rimuovi tutti i file da tuo_sito_root/modules/protector/ via FTP <br />- upload i file che hai trovato nell'archivio scaricato (vedi sopra per seguire la procedura corretta)<br />- aggiorna il modulo protector da system admin -> modules<br />- aggiunge le 2 linee per il Protector nel tuo mainfile.php<br /><br /><br /><br /><br /><br />Usare Filtri-plugin:<br /><br />Puoi inserire filtri-plugin in XOOPS_TRUST_PATH/modules/protector/filters_enabled/<br /><br />Ci sono 2 plugins in questo archivio:<br /><br />- postcommon_post_deny_by_rbl.php<br />un plugin anti-spam<br />Tutti i post inseriti da un indirizzo ip registrato in RBL saranno rifiutati.<br />Questo plugin può rallentare il sistema, specialmente le chat.<br /><br />-postcommon_post_need_multibyte.php<br />un plugin anti-spam<br />Post senza caratteri multi-byte saranno rifiutati.<br />Questo plugin è valido solo per siti giapponesei, cinesi, coreani<br /><br />Se vuoi rendere attivi i plugin, copia i file che trovi in filters_disabled in filters_enabled.<br /><br /><br /><br />CHANGELOG ORIGINALE:<br /><br /><div class="xoopsCode"><code><code><span style="color: #000000">
<span style="color: #0000BB"></span><span style="color: #007700">= </span><span style="color: #0000BB">CHANGES </span><span style="color: #007700">=
<br />
<br /></span><span style="color: #0000BB">3.00 </span><span style="color: #007700">(</span><span style="color: #0000BB">2007</span><span style="color: #007700">/</span><span style="color: #0000BB">02</span><span style="color: #007700">/</span><span style="color: #0000BB">06</span><span style="color: #007700">)
<br />- </span><span style="color: #0000BB">marked </span><span style="color: #007700">as </span><span style="color: #0000BB">a stable version
<br /></span><span style="color: #007700">- </span><span style="color: #0000BB">fixed typo in log level
<br /></span><span style="color: #007700">- </span><span style="color: #0000BB">fixed multibyte plugin never denies registered users </span><span style="color: #007700">(</span><span style="color: #0000BB">thx mizukami</span><span style="color: #007700">)
<br />- </span><span style="color: #0000BB">modified compatibility with 2.2</span><span style="color: #007700">.</span><span style="color: #0000BB">x from xoops</span><span style="color: #007700">.</span><span style="color: #0000BB">org 3.00a
<br />
<br />3.00beta2 </span><span style="color: #007700">(</span><span style="color: #0000BB">2007</span><span style="color: #007700">/</span><span style="color: #0000BB">01</span><span style="color: #007700">/</span><span style="color: #0000BB">31</span><span style="color: #007700">)
<br />- </span><span style="color: #0000BB">added plugin system </span><span style="color: #007700">(</span><span style="color: #0000BB">just postcommon_post_</span><span style="color: #007700">*)
<br />- </span><span style="color: #0000BB">added filtering</span><span style="color: #007700">-</span><span style="color: #0000BB">plugins
<br /></span><span style="color: #007700">-- </span><span style="color: #0000BB">postcommon_post_deny_by_rbl</span><span style="color: #007700">.</span><span style="color: #0000BB">php </span><span style="color: #007700">(</span><span style="color: #0000BB">deny SPAM by RBL</span><span style="color: #007700">)
<br />-- </span><span style="color: #0000BB">postcommon_post_need_multibyte</span><span style="color: #007700">.</span><span style="color: #0000BB">php </span><span style="color: #007700">(</span><span style="color: #0000BB">deny SPAM by character type</span><span style="color: #007700">)
<br />
<br /></span><span style="color: #0000BB">3.00beta </span><span style="color: #007700">(</span><span style="color: #0000BB">2007</span><span style="color: #007700">/</span><span style="color: #0000BB">01</span><span style="color: #007700">/</span><span style="color: #0000BB">30</span><span style="color: #007700">)
<br />- </span><span style="color: #0000BB">moved almost files under XOOPS_TRUST_PATH
<br /></span><span style="color: #007700">- </span><span style="color: #0000BB">modified denying IP from DB to a file under configs
<br /></span><span style="color: #007700">- </span><span style="color: #0000BB">removed rescue feature </span><span style="color: #007700">(</span><span style="color: #0000BB">just remove a file via FTP</span><span style="color: #007700">)
<br />- </span><span style="color: #0000BB">added allowed IPs </span><span style="color: #007700">for </span><span style="color: #0000BB">user of group</span><span style="color: #007700">=</span><span style="color: #0000BB">1
<br /></span><span style="color: #007700">- </span><span style="color: #0000BB">modified table structures </span><span style="color: #007700">(</span><span style="color: #0000BB">compatible MySQL5</span><span style="color: #007700">)
<br />- </span><span style="color: #0000BB">added BigUmbrella anti</span><span style="color: #007700">-</span><span style="color: #0000BB">XSS system
<br /></span><span style="color: #007700">- </span><span style="color: #0000BB">added anti</span><span style="color: #007700">-</span><span style="color: #0000BB">SPAM feature</span>
</span>
</code></code></div><br /><br />Per ogni problema scrivete pure sul forum.<br /><br />Ciao sly :sun<br />