Welcome Guest. Please Login or Register  


You are here: Index > Softaculous Auto Installer > Suggestions > Topic : WordPress installer creates security risk



Threaded Mode | Print  

 WordPress installer creates security risk, Installer leaves out critical WP security measures (3 Replies, Read 3361 times)
erclerico
Group: Member
Post Group: Newbie
Posts: 2
Status:
Take a look at the wp-config.php when this install is complete - it leaves several key phrases used to secure encrypting to their default settings - for example:

define('AUTH_KEY', 'put your unique phrase here');

Here is a code snippet from a bash script I developed for installing WP that installs secure pass phrases:

Code

curl http://api.wordpress.org/secret-key/1.1/ -o "secret_key.txt"
TIC="'"

sed -e 's/define('"${TIC}"'DB_NAME'"${TIC}"', '"${TIC}"'[[:alnum:]]*'"${TIC}"')/define('"${TIC}"'DB_NAME'"${TIC}"', '"${TIC
}${DB_NAME}${TIC}"')/g
s/define('"${TIC}"'DB_USER'"${TIC}"', '"${TIC}"'[[:alnum:]]*'"${TIC}"')/define('"${TIC}"'DB_USER'"${TIC}"', '"${TIC}${DB_US
ER}${TIC}"')/g
s/define('"${TIC}"'DB_PASSWORD'"${TIC}"', '"${TIC}"'[[:alnum:]]*'"${TIC}"')/define('"${TIC}"'DB_PASSWORD'"${TIC}"', '"${TIC
}${DB_PASSWORD}${TIC}"')/g
s/define('"${TIC}"'DB_HOST'"${TIC}"', '"${TIC}"'[[:alnum:]]*'"${TIC}"')/define('"${TIC}"'DB_HOST'"${TIC}"', '"${TIC}${DB_HO
ST}${TIC}"')/g
s/'"$(printf '\015')"'$//g
s/$table_prefix  = '"${TIC}"'wp_'"${TIC}"'/$table_prefix  = '"${TIC}${TNAME}${TIC}"'/g
/define('"${TIC}"'AUTH_KEY'"${TIC}"', '"${TIC}"'.*'"${TIC}"');/ d
/define('"${TIC}"'SECURE_AUTH_KEY'"${TIC}"', '"${TIC}"'.*'"${TIC}"');/ d
/define('"${TIC}"'LOGGED_IN_KEY'"${TIC}"', '"${TIC}"'.*'"${TIC}"');/ d
s/define('"${TIC}"'NONCE_KEY'"${TIC}"', '"${TIC}"'.*'"${TIC}"');/WORDPRESS_KEYS/g
/WORDPRESS_KEYS/{
        r secret_key.txt
        d
}' "public_html/wp-config-sample.php" > "public_html/wp-config.php"
rm -f secret_key.txt


I think you guys use perl - so I don't know how much this helps.

Thank you.

-Erin
IP: --   

WordPress installer creates security risk
alons
Group: Administrator
Post Group: Super Member
Posts: 2280
Status:
Hi,

We have added our code to generate these strings.
Please check it. The newpackage will be available to you once CRON is run.
For immediate update Run the following Shell command for cPanel:
Root> php /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/cron.php


Regards,
Alons

-----------------------
For immediate support please email us at our Support email address. PMs sent to any Softaculous Team member or posting in the forums is not the official way to get support.

Virtualizor - The Next Generation VPS Panel
Webuzo - It is Softaculous Standalone for Enterprises, SMB, Developers. Deploy it on Dedicated Servers, VPS, Virtual Appliances or the Cloud
Pinguzo - Server and Domain Monitoring tool
PopularFX - Marketplace of WordPress, Drupal, Joomla, Bootstrap themes
Remote Installer - Use Softaculous over FTP/FTPS/SFTP
IP: --   

WordPress installer creates security risk
erclerico
Group: Member
Post Group: Newbie
Posts: 2
Status:
Wow you guys are great - thank you very much!
IP: --   

WordPress installer creates security risk
alons
Group: Administrator
Post Group: Super Member
Posts: 2280
Status:
Hi,

No thank you for helping us strengthen security.

Regards,
Alons

-----------------------
For immediate support please email us at our Support email address. PMs sent to any Softaculous Team member or posting in the forums is not the official way to get support.

Virtualizor - The Next Generation VPS Panel
Webuzo - It is Softaculous Standalone for Enterprises, SMB, Developers. Deploy it on Dedicated Servers, VPS, Virtual Appliances or the Cloud
Pinguzo - Server and Domain Monitoring tool
PopularFX - Marketplace of WordPress, Drupal, Joomla, Bootstrap themes
Remote Installer - Use Softaculous over FTP/FTPS/SFTP
IP: --   

« Previous    Next »

Threaded Mode | Print  



Jump To :


Users viewing this topic
1 guests, 0 users.


All times are GMT. The time now is May 26, 2024, 7:44 am.

  Powered By AEF 1.0.8 © 2007-2008 Electron Inc.Queries: 10  |  Page Created In:0.022