PbootCMS program security configuration recommendations

Recently, some customers using the PbootCMS open-source program have reported that their websites were injected with malware/compromised. Our company has verified that the cause is vulnerabilities in this program. Users can perform security settings according to the following recommendations.

Virtual Hosting

I. Program Recommendations:

1. Log in to the backend, upgrade the program to the latest version, and reset the password to a complex password.

2. If the website does not need messages, you can disable the message function.

3. Rename the /data directory to another name, for example daj4oy7fd, then modify the database path in the configuration file /config/database.php to the name just changed.

4. Rename the backend file admin.php to another name, for example xxx222.php, then use   domain/new-name.php  to log in to the backend.

5. Delete unnecessary files and directories /doc, /rewrite, /api.php (generally not needed for corporate websites and can be deleted).

II. Permission Settings

1. Log in to the virtual hosting File Management  , check the wwwroot directory and click Permissions, and set the directory to read-only. 

After clicking Permissions, in the pop-up interface check  Set as read-only, then click Confirm Settings.

2. Then, through File Management, set  /data (new name), /runtime, /static, /config, /uploads directories to  readable and writable in sequence;

After clicking Permissions, in the pop-up interface check Readable and writable, then click Confirm Settings.

3. In the virtual hosting control panel, click Directory Protection, and set file protection for  /static  , /skin, /template, /uploads, /apps, /runtime in sequence;

Click Directory Protection, then on the page click Browse and select the corresponding folder.

Cloud Server

1. Cloud servers can also follow the above recommendations to set permissions, prohibit script execution, etc.

2. Install security software, such as 安全狗, 云锁, etc., and configure anti-tampering.

3. Regularly back up important data, such as cloud snapshots or manual backups.

The above security setting recommendations cannot 100% solve the problem of PbootCMS being injected with malware or infected with Trojans, but they can reduce the frequency of being hacked. Users also need to pay attention to program updates/vulnerability fixes, etc. 

In addition, whether it is virtual hosting or cloud servers, websites should be backed up regularly to avoid being unable to recover data after being hacked.