Moodle  2.2.1
http://www.collinsharper.com
Namespaces | Enumerations | Functions
C:/xampp/htdocs/moodle/report/security/locallib.php File Reference

Go to the source code of this file.

Namespaces

namespace  report

Enumerations

enum  REPORT_SECURITY_OK
enum  REPORT_SECURITY_INFO
enum  REPORT_SECURITY_WARNING
enum  REPORT_SECURITY_SERIOUS
enum  REPORT_SECURITY_CRITICAL

Functions

 report_security_hide_timearning ()
 report_security_get_issue_list ()
 report_security_doc_link ($issue, $name)
 report_security_check_globals ($detailed=false)
 report_security_check_noauth ($detailed=false)
 report_security_check_passwordpolicy ($detailed=false)
 report_security_check_embed ($detailed=false)
 report_security_check_mediafilterswf ($detailed=false)
 report_security_check_unsecuredataroot ($detailed=false)
 report_security_check_displayerrors ($detailed=false)
 report_security_check_openprofiles ($detailed=false)
 report_security_check_google ($detailed=false)
 report_security_check_emailchangeconfirmation ($detailed=false)
 report_security_check_cookiesecure ($detailed=false)
 report_security_check_configrw ($detailed=false)
 report_security_check_passwordsaltmain ($detailed=false)
 report_security_check_riskxss ($detailed=false)
 report_security_check_defaultuserrole ($detailed=false)
 report_security_check_guestrole ($detailed=false)
 report_security_check_frontpagerole ($detailed=false)
 report_security_check_riskadmin ($detailed=false)
 report_security_check_riskbackup ($detailed=false)

Enumeration Type Documentation

enum REPORT_SECURITY_CRITICAL

Definition at line 33 of file locallib.php.

enum REPORT_SECURITY_INFO

Definition at line 30 of file locallib.php.

enum REPORT_SECURITY_OK

Definition at line 29 of file locallib.php.

enum REPORT_SECURITY_SERIOUS

Definition at line 32 of file locallib.php.

enum REPORT_SECURITY_WARNING

Definition at line 31 of file locallib.php.

Function Documentation

report_security_check_configrw ( $  detailed = false)

Verifies config.php is not writable anymore after installation, config files were changed on several outdated server.

Parameters:
bool$detailed
Returns:
object result

Definition at line 448 of file locallib.php.

report_security_check_cookiesecure ( $  detailed = false)

Verifies if https enabled only secure cookies allowed, this prevents redirections and sending of cookies to unsecure port.

Parameters:
bool$detailed
Returns:
object result

Definition at line 412 of file locallib.php.

report_security_check_defaultuserrole ( $  detailed = false)

Verifies sanity of default user role.

Parameters:
bool$detailed
Returns:
object result

Definition at line 557 of file locallib.php.

Here is the call graph for this function:

report_security_check_displayerrors ( $  detailed = false)

Verifies displaying of errors - problem for lib files and 3rd party code because we can not disable debugging in these scripts (they do not include config.php)

Parameters:
bool$detailed
Returns:
object result

Definition at line 280 of file locallib.php.

report_security_check_emailchangeconfirmation ( $  detailed = false)

Verifies email confirmation - spammers were changing mails very often

Parameters:
bool$detailed
Returns:
object result

Definition at line 375 of file locallib.php.

report_security_check_embed ( $  detailed = false)

Verifies sloppy embedding - this should have been removed long ago!!

Parameters:
bool$detailed
Returns:
object result

Definition at line 177 of file locallib.php.

report_security_check_frontpagerole ( $  detailed = false)

Verifies sanity of frontpage role

Parameters:
bool$detailed
Returns:
object result

Definition at line 673 of file locallib.php.

Here is the call graph for this function:

report_security_check_globals ( $  detailed = false)

============================================= Issue checks ============================================= Verifies register globals PHP setting.

Parameters:
bool$detailed
Returns:
object result

Definition at line 85 of file locallib.php.

Here is the call graph for this function:

report_security_check_google ( $  detailed = false)

Verifies google access not combined with disabled guest access because attackers might gain guest access by modifying browser signature.

Parameters:
bool$detailed
Returns:
object result

Definition at line 341 of file locallib.php.

report_security_check_guestrole ( $  detailed = false)

Verifies sanity of guest role

Parameters:
bool$detailed
Returns:
object result

Definition at line 615 of file locallib.php.

Here is the call graph for this function:

report_security_check_mediafilterswf ( $  detailed = false)

Verifies sloppy swf embedding - this should have been removed long ago!!

Parameters:
bool$detailed
Returns:
object result

Definition at line 208 of file locallib.php.

Here is the call graph for this function:

report_security_check_noauth ( $  detailed = false)

Verifies unsupported noauth setting

Parameters:
bool$detailed
Returns:
object result

Definition at line 114 of file locallib.php.

Here is the call graph for this function:

report_security_check_openprofiles ( $  detailed = false)

Verifies open profiles - originally open by default, not anymore because spammer abused it a lot

Parameters:
bool$detailed
Returns:
object result

Definition at line 309 of file locallib.php.

report_security_check_passwordpolicy ( $  detailed = false)

Verifies if password policy set

Parameters:
bool$detailed
Returns:
object result

Definition at line 146 of file locallib.php.

report_security_check_passwordsaltmain ( $  detailed = false)

Definition at line 474 of file locallib.php.

Here is the call graph for this function:

report_security_check_riskadmin ( $  detailed = false)

Lists all admins.

Parameters:
bool$detailed
Returns:
object result

Definition at line 732 of file locallib.php.

report_security_check_riskbackup ( $  detailed = false)

Lists all roles that have the ability to backup user data, as well as users

Parameters:
bool$detailed
Returns:
object result

Definition at line 773 of file locallib.php.

Here is the call graph for this function:

report_security_check_riskxss ( $  detailed = false)

Lists all users with XSS risk, it would be great to combine this with risk trusts in user table, unfortunately nobody implemented user trust UI yet :-(

Parameters:
bool$detailed
Returns:
object result

Definition at line 510 of file locallib.php.

report_security_check_unsecuredataroot ( $  detailed = false)

Verifies fatal misconfiguration of dataroot

Parameters:
bool$detailed
Returns:
object result

Definition at line 241 of file locallib.php.

Here is the call graph for this function:

report_security_doc_link ( $  issue,
$  name 
)

Definition at line 65 of file locallib.php.

report_security_get_issue_list ( )

Definition at line 40 of file locallib.php.

report_security_hide_timearning ( )

Definition at line 35 of file locallib.php.

 All Data Structures Namespaces Files Functions Variables Enumerations