View Issue Details

This bug affects 2 person(s).
 260
IDProjectCategoryView StatusLast Update
14643Feature requestsSecuritypublic2023-07-28 10:27
Reporterjelo Assigned To 
PrioritynoneSeverityfeature 
Status newResolutionopen 
Summary14643: SiteHealth section/plugin to check environment and setup of LimeSurvey
Description

Currently some checks (php settings, database) are only done when installing LimeSurvey.
But PHP version can change, some settings can change. So there is a need to check settings inside an LimeSurvey installation too.
When e.g. PHP is changed to 7.2 under Windows, and OpenSSL is not installed, the no missing mcrypt lib (PHP 7.2 and higher) will prevent creating tokens (on Linux the fallback would be the random device, which is not available under Windows).

Currently the debug settings, database cleaning, phpinfo, system-info are in different places in the LimeSurvey GUI.
Move them in one section. Then improve with e.g. system-check report, which can be copy and paste. Placing the installation checks in this section allows to improve the installation-process too. More checks will be done and the code will improve.

A good example is https://wordpress.org/plugins/health-check/ . https://github.com/WordPress/health-check
It comes with a Application check (missing things to run WordPress as indented), with debugging tools (copy & paste for forum or help-desk),
with a tool to check for issues (deactivates plugins and set a standard theme only for the admin to check for issues). It also has a phpinfo section and a tool section (currently offers E-Mail-check and file integrity check).

https://github.com/WordPress/health-check/tree/master/src/pages

TagsNo tags attached.
Bug heat260
Story point estimate13
Users affected %10

Relationships

related to 14621 new Hardening PHP during installation 

Users monitoring this issue

There are no users monitoring this issue.

Activities

ollehar

ollehar

2019-03-14 15:50

administrator   ~50984

Nice idea. Another possibility is showing a page during installation with security recommendations. One problem though is how such recommendations tend to shift constantly, and it's really hard to reach consensus.

DenisChenu

DenisChenu

2019-03-15 08:00

developer   ~50995

But more : give advice when we have some security knows issue (minor or not ?)

Issue History

Date Modified Username Field Change
2019-03-13 11:11 jelo New Issue
2019-03-13 15:13 jelo Description Updated
2019-03-14 15:50 ollehar Note Added: 50984
2019-03-15 07:59 DenisChenu Relationship added related to 14621
2019-03-15 08:00 DenisChenu Note Added: 50995
2023-02-08 16:19 ollehar Story point estimate => 13
2023-02-08 16:19 ollehar Users affected % => 10
2023-07-28 10:22 stefanleisez Bug heat 254 => 256
2023-07-28 13:36 c_schmitz Bug heat 256 => 254
2023-09-30 01:00 guest Bug heat 254 => 260