Disabling PHPIDS - Possible Attacks

Just to let you know, for those of you who are willing to give up some security to never receive any Possible Attacks emails or blocks anymore, you can disable PHPIDS now.

If you choose to, you can navigate to your admin panel Settings>Advanced Settings>Other and change your total impact levels to a -1 (negative one).

Just remember that if you choose to do this, you do put your site at risk for actual attacks.

Chris

Nothing to see here
Quote · 18 Dec 2009

Yes well I might disable it.. but NOT because I am dumb enough to ingore possible attacks.. just because Dolphin 7.x is crazy and thinks that by creating a new group you are seen as a hacker oO (see the ticket on the bottom to understand this)

Can Boonex do anything to reduce the FALSE ALARMS so we don't have to ignore REAL ATTACKS?

( thanks Zarcon, I really needed your piece of info :D, my website has gone crazy :))) )

P.S. Boonex I really like your way of thinking.. It's not a good thing to "fix" it's better to ignore.. http://www.boonex.com/trac/dolphin/ticket/1648

Quote · 22 Dec 2009

I had to disabling PHPIDS too... Too many false alarms !!! :-(

Life is a fatal disease, sexually transmissible - Virginity is carcinogenic! Ask here for vaccine.
Quote · 22 Dec 2009

I had to disabling PHPIDS too... Too many false alarms !!! :-(

I did not disable it, instead of -1 I put 60 (default value was 30) :D so this kinda fixed my problem.. I don't have anymore those stupid warnings.. Most of the false attacks were of level 50.. so higher value means a more serious threat..

Boonex should really explain what those values mean and what is considered a "secure level" to have..

Quote · 22 Dec 2009

I've been telling people here my CalTrade site has not been getting attacked because I have modified it so heavily.  Apparently that is not true - I just looked and the impact level was set at -1.  Must have happened during the migration.  So far, nothing horrible has happened, but I think the site probably would have been unusable had the security been in effect.  They really need to fix this.

Quote · 22 Dec 2009
 
 
Below is the legacy version of the Boonex site, maintained for Dolphin.Pro 7.x support.
The new Dolphin solution is powered by UNA Community Management System.