saulteafarmer/castopod
1
0
Fork 0
mirror of https://code.castopod.org/adaures/castopod synced 2025-06-23 16:05:34 +00:00
Code Issues Packages Projects Releases Wiki Activity

New translations security.mdx (Breton)

Browse Source 
[ci skip]
This commit is contained in:
crowdin 2024-07-05 17:54:35 +00:00
parent 483400cc49
commit 1749a37ef8
1 changed files with 25 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

31
docs/src/content/docs/br/getting-started/security.mdx
View File

@ -1,19 +1,18 @@
---
title: Bezbednosni interesi
title: Security concerns
---
Castopod je napravljen na [CodeIgniter4](https://codeigniter.com/), PHP okviru
koji podstiče
[dobre bezbednosne prakse](https://codeigniter.com/user_guide/concepts/security.html).
Da biste maksimalno povećali bezbednost vaše instance i sprečili bilo kakav
zlonamerni napad, mi preporučujemo da ažurirate sve dozvole Castopod datoteka
nakon instalacije ili ažuriranja (da biste izbegli bilo kakvu grešku prethodne
dozvole):
To maximize your instance's safety and prevent any malicious attack, we
recommend you update all your Castopod files permissions after installation or
updates (to avoid any prior permission error):
- `writable/` direktorijum mora biti **readable** i **writable**.
- `public/media/` direktorijum mora biti **readable** i **writable**.
- bilo koja druga datoteka mora biti podešena na **readonly**.
- any other file must be set to **readonly**.
Na primer, ukoliko koristite Apache ili NGINX sa Ubuntu-om možete uraditi
sledeće:
@ -23,3 +22,23 @@ sudo chown -R root:root /path/to/castopod
sudo chown -R www-data:www-data /path/to/castopod/writable
sudo chown -R www-data:www-data /path/to/castopod/public/media
```
## Third-party Plugins
Since v2's [Plugins Architecture](../../plugins), Castopod can be extended with
all sorts of cool features. Anyone can choose to create their own plugins and
even share them with the community.
👉 Plugins are a way to inject code in parts of Castopod through
[Hooks](../../plugins/hooks).
Now, if you create your own plugin and install it in your own Castopod, that
means you control both the code that gets injected and the environment: all is
good!
But as for **third-party plugins**, you must treat them as a **potential
security risk _by default_**:
1. Make sure you **trust the source before installing any third-party plugin**
2. **Review the plugin's code** yourself if you can or
[ask developers from the community for help](https://castopod.org/chat)