Codezwiz >> Forums >> General PHP Nuke Help >> Security Questions 7.4

this is my first phpnuke site and had a question about security. i installed a version 7.4 that auto installed from my cpanel for you reference. question is does this version have any flaws i should be worried about that need to be addressed or am i ready to go? id rather spend the time now to get all security threats eliminated before i spend half my life adding content to it to just have it hacked:) i browsed a few sites for their updates but didnt see version 7.4 mentioned much.i did see something about changing the nuke_author setting to name_author in the myphp control panel. is this something i need to do? i didnt quite understand how to do this as when i tried didnt see anyway to change it. clicked edit and changed but it changed right back. also any updates i may need the advice would be greatly appreciated. until i make sure i got my security tweeked id be afraid to even post a link here to my site for questions:)

You can go here: [ Register or login to view links on this board. ] and grab the CVS 7.4 patch on the front page where it says: PHP-Nuke Patched Series By Chatserv and while you're there grab Sentinel 2.1.1 from: [ Register or login to view links on this board.] and install it. Sentinel is an extra security application that is very good.

thanks for the fast response on my way there now:)

done thanks again:)

starting to see how this all comes together after reading part of the manual on it but another thing i needed to ask is how to create god account? i typed user God and pass Password and it says user login incorrect. then i typed in lost password like a dummy and it said pass for God emailed to me but i have no idea where it went as i didnt get. in my admin it doesnt show a God user so how do i make one? or do i need one?

The very first time you login after installing Nuke is when the "God" account is created. It's just a terminology...you can choose what ever name you like and you will still automaticly have the "God" account. Once done, you can see it in your Admin Control Panel after clicking on " Edit Admins". If you need to reset your admin password this will help: [ Register or login to view links on this board. ]

i chose my name when i installed it in cp it asked name and user yet when i log in in that name and try to use sentinel some of the options are greyed out on the adminstation protection part and when go to manage administration section it has a key that shows a * as represnting god user yet the one i created in cpanel doesnt have the asterik by it and neither does the super user i created the first time ran. it will let me delete either one of them looks like. in the manual i thought it said the god user cant be deleted?

I'm not real sure but I think using the CPanel to install nuke can do funny things sometimes...and I don't mean the haha funny variety. I'm not sure what to suggest. This is a new site correct? with little or no members? If so what I would do is wipe it clean, and upload nuke into the root directory without using your CPanel at all. CPanel is easy for sure, but if you upload manually you know what your getting and problems can be tracked down much easier.

My 2 coppers worth anyway.