TEST Software Version Checker: Difference between revisions
| (12 intermediate revisions by 2 users not shown) | |||
| Line 1: | Line 1: | ||
==Introduction== | ==Introduction== | ||
Many of our users use the same popular software to run their website. However, as is common in popular and widespread software, various bugs or errors can occur in the program. These flaws can be exploited by hackers to gain access to websites or databases. | |||
Whenever a new update is released for any popular software (e.g., WordPress, MediaWiki, Joomla) hackers will find out which security flaws have been patched, and using this knowledge, they try to find users who haven't updated their software, to gain access to the websites or databases. This is the reason why it is so critical to update the software itself, plugins, themes, or any related software as soon as the updates roll out. To help facilitate this and prevent security breaches, we have created a tool, the Software Version Checker, to help you keep the most commonly used software up-to-date. Currently, this feature is only active if you have an organization or student union account. | |||
==What to do when you receive an e-mail== | |||
When you receive an e-mail from the Software Version Checker, it is of utmost importance to update the software mentioned in the e-mail. It is also the best time to check if the other software you use is up-to-date. As mentioned below, our tool does not check all software. | |||
You can find more information [[Updating WordPress|here]] on how to automate this for WordPress to save a lot of time and effort. Since updating MediaWiki can be a somewhat daunting process, we have made a more detailed guide available on [[Updating MediaWiki]]. | |||
==Supported Software== | ==Supported Software== | ||
Sadly not every piece of software can be supported. Because of this, we have decided to choose the most popular software, since they are more likely to get security breaches. | |||
*Joomla ( | *Drupal (including modules and themes) | ||
*MediaWiki (MediaWiki Extensions and Themes are not supported | *Joomla (Plugins are not supported) | ||
* | *MediaWiki (MediaWiki Extensions and Themes are not supported) | ||
*WordPress | *phpBB (including plugins and styles) | ||
== | *WordPress (including plugins and themes) | ||
==Functionality of the Software Version Checker== | |||
The Software Version Checker fulfills the following functions : | |||
*Scan relevant files, detect supported software, and store in database | *Scan relevant files, detect supported software, and store in database | ||
*Check the version and validity of outdated software | *Check the version and validity of outdated software | ||
* | *Notify accounts that are using outdated software | ||
The Software Version Checker does this once every day. | |||
The | |||
==Ignoring specific software== | |||
The Software Version Checker allows specified paths to be excluded from its search. If you believe you have software that should be ignored (for example certain custom plugins or themes), you are free to e-mail a request to ulyssis@ulyssis.org. Please list your account name, the location of the specific file(s), the nature of what is being detected, and a detailed description of the specific situation. | |||
==Ignoring Organisations/Student Unions== | |||
The Software Version Checker also allows our users to ignore specific Organisations or Student Unions entirely. This feature is possible on request, but only after extensive deliberation with ULYSSIS. Enabling this feature also has possible consequences; no more mails about software that is outdated, unless it is enabled on request, and no possible support if the user's account gets hacked. If the account does get hacked it will be suspend immediately. | |||
== | |||
The Version Checker | |||
== | |||
Latest revision as of 10:13, 26 October 2023
Introduction
Many of our users use the same popular software to run their website. However, as is common in popular and widespread software, various bugs or errors can occur in the program. These flaws can be exploited by hackers to gain access to websites or databases.
Whenever a new update is released for any popular software (e.g., WordPress, MediaWiki, Joomla) hackers will find out which security flaws have been patched, and using this knowledge, they try to find users who haven't updated their software, to gain access to the websites or databases. This is the reason why it is so critical to update the software itself, plugins, themes, or any related software as soon as the updates roll out. To help facilitate this and prevent security breaches, we have created a tool, the Software Version Checker, to help you keep the most commonly used software up-to-date. Currently, this feature is only active if you have an organization or student union account.
What to do when you receive an e-mail
When you receive an e-mail from the Software Version Checker, it is of utmost importance to update the software mentioned in the e-mail. It is also the best time to check if the other software you use is up-to-date. As mentioned below, our tool does not check all software.
You can find more information here on how to automate this for WordPress to save a lot of time and effort. Since updating MediaWiki can be a somewhat daunting process, we have made a more detailed guide available on Updating MediaWiki.
Supported Software
Sadly not every piece of software can be supported. Because of this, we have decided to choose the most popular software, since they are more likely to get security breaches.
- Drupal (including modules and themes)
- Joomla (Plugins are not supported)
- MediaWiki (MediaWiki Extensions and Themes are not supported)
- phpBB (including plugins and styles)
- WordPress (including plugins and themes)
Functionality of the Software Version Checker
The Software Version Checker fulfills the following functions :
- Scan relevant files, detect supported software, and store in database
- Check the version and validity of outdated software
- Notify accounts that are using outdated software
The Software Version Checker does this once every day.
Ignoring specific software
The Software Version Checker allows specified paths to be excluded from its search. If you believe you have software that should be ignored (for example certain custom plugins or themes), you are free to e-mail a request to ulyssis@ulyssis.org. Please list your account name, the location of the specific file(s), the nature of what is being detected, and a detailed description of the specific situation.
Ignoring Organisations/Student Unions
The Software Version Checker also allows our users to ignore specific Organisations or Student Unions entirely. This feature is possible on request, but only after extensive deliberation with ULYSSIS. Enabling this feature also has possible consequences; no more mails about software that is outdated, unless it is enabled on request, and no possible support if the user's account gets hacked. If the account does get hacked it will be suspend immediately.
