Topics tagged security

Topic	Replies	Views	Activity
How to prevent an infection of `pub/health_check.php` in 2.3.3-p1 ≤ Magento ≤ 2.3.7-p2 and 2.4.0 ≤ Magento ≤ 2.4.3-p1? Administration magento236 , magento237 , security , magento243 , magento240 , magento234 , magento235 , magento24 , health_check	1	89	January 31, 2024
How to fix «Your current session has been expired» frontend error in Magento 2.3 ≥ 2.3.7 and Magento 2.4 ≥ 2.4.3? Issues security , bug , session , bug-fix , module-security , magento23 , frontend , magento24 , magento237 , magento243	1	382	July 2, 2023
How to fix «Session size of <…> exceeded allowed session max size of <…>» in Magento 2.3 ≥ 2.3.7 and Magento 2.4 ≥ 2.4.3? Issues backend , security , backend-session , bug , session , bug-fix , backend-authentication , module-security , magento23 , magento237	1	430	July 2, 2023
How to fix «Your current session has been expired» backend error in Magento 2.3 ≥ 2.3.7 and Magento 2.4 ≥ 2.4.3? Issues backend , security , backend-session , bug , session , bug-fix , backend-authentication , module-security , magento23 , magento237 , magento24 , magento243	2	505	July 2, 2023
How to disable the standard Magento 2 authentication timeouts from the command line? Administration security , timeout , authentication , mysql , cookie , command-line	0	1558	March 3, 2018
How should my extension check whether an AlphaHPP's response message is sent by AlphaCommerceHub or by a hacker? AlphaCommerceHub security , alphacommercehub , alphacommercehub-api , alphacommercehub-unanswered , alphacommercehub-success-url , alphacommercehub-api-response	2	613	December 1, 2017
[AlphaCommerceHub] How is the APIs authentication security implemented? AlphaCommerceHub alphacommercehub , alphacommercehub-api , security , authentication	1	652	October 25, 2017
[AlphaCommerceHub] What is «Crypto ID»? AlphaCommerceHub security , encryption , alphacommercehub , alphacommercehub-merchant-interface	1	819	October 25, 2017
[PostFinance] How to setup the «Hash algorithm» option? PostFinance security , hash , postfinance , postfinance-merchant-interface , postfinance-api	1	1028	August 20, 2017
[PostFinance] How to setup the «Compose the string to be hashed by concatenating the value of» option? PostFinance postfinance , postfinance-merchant-interface , postfinance-api , security	1	918	August 20, 2017
[PostFinance] How to setup the «Character encoding» option? PostFinance security , postfinance , postfinance-merchant-interface , postfinance-api	1	804	August 20, 2017
What is the Magento_Security module for? Module_Security module-security , core-module , module , security	2	2135	June 21, 2017
How are the «secureUrlList» and «excludedUrlList» arguments injected to the \Magento\Framework\Url\SecurityInfo's constructor? Development url-security-info , security , secure-url , https , ssl , url , excluded-url-list , secure-url-list	1	1722	May 31, 2016
When Magento will stop releasing security patches for Magento EE 1.14? Ask your questions security , migrate-from-1.x	1	1325	July 7, 2016
How to fix the «SSL certificate problem: unable to get local issuer certificate» issue while signing into a Magento Marketplace account on the backend Component Manager screen? Magento Marketplace ssl , component-manager , backend , magento-marketplace , magento.com , https , security	3	4500	May 4, 2017
All the Magento 2 websites based on the latest 2.1.6 and or an earlier version with the disabled «Add Secret Key to URLs» option are vulnerable to DC-2017-04-003 (Remote Code Execution, CSRF)) News security , backend-url-secret-key , news	0	906	April 14, 2017
How to programmatically build a store's URL with the forced HTTPS protocol using the «_secure» parameter? Development secure-url , url , build-url , security , https , ssl	1	8415	May 31, 2016
How is the \Magento\Store\Model\Store::XML_PATH_SECURE_IN_ADMINHTML constant declared and used? Development security , secure-url , url , ssl , https , configuration-general , configuration-general-web , configuration	1	1247	May 31, 2016
How is the \Magento\Store\Model\Store::XML_PATH_SECURE_IN_FRONTEND constant declared and used? Development security , secure-url , url , ssl , https , configuration-general , configuration-general-web , configuration , url-security-info	1	2527	May 31, 2016
How is \Magento\Framework\Url\SecurityInfo::isSecure() implemented and used? Development secure-url-list , excluded-url-list , url , ssl , https , secure-url , security , url-security-info	1	1832	May 31, 2016
How is the «web/secure/use_in_adminhtml» option implemented and used? Development web-secure-use_in_adminhtml , https , ssl , secure-url , url , configuration , configuration-general-web , configuration-general , security	1	3030	May 30, 2016
How is the «web/secure/use_in_frontend» option implemented and used? Development https , ssl , secure-url , url , configuration , configuration-general-web , configuration-general , security , web-secure-use_in_frontend	1	2647	May 30, 2016
How to force HTTPS for the frontend URLs? Administration configuration-general-web , configuration-general , configuration , secure-url , url , https , ssl , security , web-secure-use_in_frontend	1	11521	May 30, 2016
How to force HTTPS for the backend URLs? Administration configuration-general-web , configuration-general , configuration , https , ssl , backend , secure-url , security , websecureuse_in_adminhtml	1	2851	May 30, 2016
How to reset the «Secure Base URL for Static View Files» option value by an SQL query? Administration static-content , base-url , url , configuration , sql , secure-url , https , ssl , security	1	5118	March 25, 2016
How to reset the «Secure Base URL for User Media Files» option value by an SQL query? Administration media , base-url , url , configuration , sql , secure-url , https , ssl , security	1	2492	March 25, 2016
How is the \Magento\Security\Model\AdminSessionsManager::logoutOtherUserSessions() implemented and used? Module_Security backend , backend-authentication , authentication , module-security , security , backend-session , session , table-admin_user_session	1	2197	April 10, 2016
How is the \Magento\Security\Model\AdminSessionsManager::getSessionsForCurrentUser() implemented and used? Module_Security module-security , security , backend , backend-session , session , authentication , backend-authentication , table-admin_user_session	1	1306	April 10, 2016
How is the \Magento\Security\Model\AdminSessionsManager::processLogin() implemented and used? Module_Security module-security , security , session , backend-session , authentication , backend-authentication	1	1997	April 10, 2016
How is the \Magento\Security\Model\AdminSessionsManager::processProlong() implemented and used? Module_Security module-security , security , authentication , backend-authentication , backend , session , backend-session , table-admin_user_session	1	1321	April 10, 2016

How to prevent an infection of `pub/health_check.php` in 2.3.3-p1 ≤ Magento ≤ 2.3.7-p2 and 2.4.0 ≤ Magento ≤ 2.4.3-p1?

Administration

magento236 , magento237 , security , magento243 , magento240 , magento234 , magento235 , magento24 , health_check

1

89

January 31, 2024

How to fix «Your current session has been expired» frontend error in Magento 2.3 ≥ 2.3.7 and Magento 2.4 ≥ 2.4.3?

Issues

security , bug , session , bug-fix , module-security , magento23 , frontend , magento24 , magento237 , magento243

1

382

July 2, 2023

How to fix «Session size of <…> exceeded allowed session max size of <…>» in Magento 2.3 ≥ 2.3.7 and Magento 2.4 ≥ 2.4.3?

Issues

backend , security , backend-session , bug , session , bug-fix , backend-authentication , module-security , magento23 , magento237

1

430

July 2, 2023

How to fix «Your current session has been expired» backend error in Magento 2.3 ≥ 2.3.7 and Magento 2.4 ≥ 2.4.3?

Issues

backend , security , backend-session , bug , session , bug-fix , backend-authentication , module-security , magento23 , magento237 , magento24 , magento243

2

505

July 2, 2023

How to disable the standard Magento 2 authentication timeouts from the command line?

Administration

security , timeout , authentication , mysql , cookie , command-line

0

1558

March 3, 2018

How should my extension check whether an AlphaHPP's response message is sent by AlphaCommerceHub or by a hacker?

AlphaCommerceHub

security , alphacommercehub , alphacommercehub-api , alphacommercehub-unanswered , alphacommercehub-success-url , alphacommercehub-api-response