matomo-org / matomo-org/plugin-SecurityInfo

Replace PhpSecInfo with something more modern

Open
#27 2 comments 2 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
PHP
Stars
24
Forks
17
Avg merge
13h 14m
Merged PRs (30d)
5

Description

As this is the most downloaded Matomo plugin and the description recommends using it

We highly recommend that all Matomo administrators enable the SecurityInfo plugin, and then view the Settings. The plugin is a tool in a multilayered security approach.

we should make sure that the recommendation it gives are up to date.
Unfortunately the development for PhpSecInfo seems to have stopped in 2007 or 2009 and while there have been some fixes to make it work with newer PHP versions, I am not sure if the recommendations are still correct and (more importantly) if not some important recommendations are missing.

But I couldn't find many alternatives. https://github.com/sektioneins/pcc seems to be newer, but it doesn't seem to have a way to get the results apart from echo.

If someone knows a better alternative, please comment here.

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by reviewing the SecurityInfo plugin and PhpSecInfo/PhpSecInfo.php, then compare the current recommendations with the newer pcc alternative mentioned in the issue. Determine how security results can be obtained without direct output. Done means selecting and integrating a maintained alternative with up-to-date recommendations, including important checks that are currently missing.

Written by the indexing model from the issue text.

Assessment

Tech stack
php
Domain
security
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.