Topics tagged security

Topic	Replies	Views	Activity
How to prevent an infection of `pub/health_check.php` in 2.3.3-p1 ≤ Magento ≤ 2.3.7-p2 and 2.4.0 ≤ Magento ≤ 2.4.3-p1? Administration magento236 , magento237 , security , magento243 , magento240 , magento234 , magento235 , magento24 , health_check	1	94	January 31, 2024
How to fix «Your current session has been expired» frontend error in Magento 2.3 ≥ 2.3.7 and Magento 2.4 ≥ 2.4.3? Issues security , bug , session , bug-fix , module-security , magento23 , frontend , magento24 , magento237 , magento243	1	383	July 2, 2023
How to fix «Session size of <…> exceeded allowed session max size of <…>» in Magento 2.3 ≥ 2.3.7 and Magento 2.4 ≥ 2.4.3? Issues backend , security , backend-session , bug , session , bug-fix , backend-authentication , module-security , magento23 , magento237	1	435	July 2, 2023
How to fix «Your current session has been expired» backend error in Magento 2.3 ≥ 2.3.7 and Magento 2.4 ≥ 2.4.3? Issues backend , security , backend-session , bug , session , bug-fix , backend-authentication , module-security , magento23 , magento237 , magento24 , magento243	2	512	July 2, 2023
How to disable the standard Magento 2 authentication timeouts from the command line? Administration security , timeout , authentication , mysql , cookie , command-line	0	1560	March 3, 2018
How should my extension check whether an AlphaHPP's response message is sent by AlphaCommerceHub or by a hacker? AlphaCommerceHub security , alphacommercehub , alphacommercehub-api , alphacommercehub-unanswered , alphacommercehub-success-url , alphacommercehub-api-response	2	614	December 1, 2017
[AlphaCommerceHub] How is the APIs authentication security implemented? AlphaCommerceHub alphacommercehub , alphacommercehub-api , security , authentication	1	652	October 25, 2017
[AlphaCommerceHub] What is «Crypto ID»? AlphaCommerceHub security , encryption , alphacommercehub , alphacommercehub-merchant-interface	1	819	October 25, 2017
[PostFinance] How to setup the «Hash algorithm» option? PostFinance security , hash , postfinance , postfinance-merchant-interface , postfinance-api	1	1029	August 20, 2017
[PostFinance] How to setup the «Compose the string to be hashed by concatenating the value of» option? PostFinance postfinance , postfinance-merchant-interface , postfinance-api , security	1	918	August 20, 2017
[PostFinance] How to setup the «Character encoding» option? PostFinance security , postfinance , postfinance-merchant-interface , postfinance-api	1	805	August 20, 2017
What is the Magento_Security module for? Module_Security module-security , core-module , module , security	2	2136	June 21, 2017
How are the «secureUrlList» and «excludedUrlList» arguments injected to the \Magento\Framework\Url\SecurityInfo's constructor? Development url-security-info , security , secure-url , https , ssl , url , excluded-url-list , secure-url-list	1	1722	May 31, 2016
When Magento will stop releasing security patches for Magento EE 1.14? Ask your questions security , migrate-from-1.x	1	1327	July 7, 2016
How to fix the «SSL certificate problem: unable to get local issuer certificate» issue while signing into a Magento Marketplace account on the backend Component Manager screen? Magento Marketplace ssl , component-manager , backend , magento-marketplace , magento.com , https , security	3	4507	May 4, 2017
All the Magento 2 websites based on the latest 2.1.6 and or an earlier version with the disabled «Add Secret Key to URLs» option are vulnerable to DC-2017-04-003 (Remote Code Execution, CSRF)) News security , backend-url-secret-key , news	0	908	April 14, 2017
How to programmatically build a store's URL with the forced HTTPS protocol using the «_secure» parameter? Development secure-url , url , build-url , security , https , ssl	1	8416	May 31, 2016
How is the \Magento\Store\Model\Store::XML_PATH_SECURE_IN_ADMINHTML constant declared and used? Development security , secure-url , url , ssl , https , configuration-general , configuration-general-web , configuration	1	1248	May 31, 2016
How is the \Magento\Store\Model\Store::XML_PATH_SECURE_IN_FRONTEND constant declared and used? Development security , secure-url , url , ssl , https , configuration-general , configuration-general-web , configuration , url-security-info	1	2527	May 31, 2016
How is \Magento\Framework\Url\SecurityInfo::isSecure() implemented and used? Development secure-url-list , excluded-url-list , url , ssl , https , secure-url , security , url-security-info	1	1832	May 31, 2016
How is the «web/secure/use_in_adminhtml» option implemented and used? Development web-secure-use_in_adminhtml , https , ssl , secure-url , url , configuration , configuration-general-web , configuration-general , security	1	3035	May 30, 2016
How is the «web/secure/use_in_frontend» option implemented and used? Development https , ssl , secure-url , url , configuration , configuration-general-web , configuration-general , security , web-secure-use_in_frontend	1	2650	May 30, 2016
How to force HTTPS for the frontend URLs? Administration configuration-general-web , configuration-general , configuration , secure-url , url , https , ssl , security , web-secure-use_in_frontend	1	11525	May 30, 2016
How to force HTTPS for the backend URLs? Administration configuration-general-web , configuration-general , configuration , https , ssl , backend , secure-url , security , websecureuse_in_adminhtml	1	2853	May 30, 2016
How to reset the «Secure Base URL for Static View Files» option value by an SQL query? Administration static-content , base-url , url , configuration , sql , secure-url , https , ssl , security	1	5120	March 25, 2016
How to reset the «Secure Base URL for User Media Files» option value by an SQL query? Administration media , base-url , url , configuration , sql , secure-url , https , ssl , security	1	2493	March 25, 2016
How is the \Magento\Security\Model\AdminSessionsManager::logoutOtherUserSessions() implemented and used? Module_Security backend , backend-authentication , authentication , module-security , security , backend-session , session , table-admin_user_session	1	2200	April 10, 2016
How is the \Magento\Security\Model\AdminSessionsManager::getSessionsForCurrentUser() implemented and used? Module_Security module-security , security , backend , backend-session , session , authentication , backend-authentication , table-admin_user_session	1	1310	April 10, 2016
How is the \Magento\Security\Model\AdminSessionsManager::processLogin() implemented and used? Module_Security module-security , security , session , backend-session , authentication , backend-authentication	1	1999	April 10, 2016
How is the \Magento\Security\Model\AdminSessionsManager::processProlong() implemented and used? Module_Security module-security , security , authentication , backend-authentication , backend , session , backend-session , table-admin_user_session	1	1324	April 10, 2016

How to prevent an infection of `pub/health_check.php` in 2.3.3-p1 ≤ Magento ≤ 2.3.7-p2 and 2.4.0 ≤ Magento ≤ 2.4.3-p1?

Administration

magento236 , magento237 , security , magento243 , magento240 , magento234 , magento235 , magento24 , health_check

1

94

January 31, 2024

How to fix «Your current session has been expired» frontend error in Magento 2.3 ≥ 2.3.7 and Magento 2.4 ≥ 2.4.3?

Issues

security , bug , session , bug-fix , module-security , magento23 , frontend , magento24 , magento237 , magento243

1

383

July 2, 2023

How to fix «Session size of <…> exceeded allowed session max size of <…>» in Magento 2.3 ≥ 2.3.7 and Magento 2.4 ≥ 2.4.3?

Issues

backend , security , backend-session , bug , session , bug-fix , backend-authentication , module-security , magento23 , magento237

1

435

July 2, 2023

How to fix «Your current session has been expired» backend error in Magento 2.3 ≥ 2.3.7 and Magento 2.4 ≥ 2.4.3?

Issues

backend , security , backend-session , bug , session , bug-fix , backend-authentication , module-security , magento23 , magento237 , magento24 , magento243

2

512

July 2, 2023

How to disable the standard Magento 2 authentication timeouts from the command line?

Administration

security , timeout , authentication , mysql , cookie , command-line

0

1560

March 3, 2018

How should my extension check whether an AlphaHPP's response message is sent by AlphaCommerceHub or by a hacker?

AlphaCommerceHub

security , alphacommercehub , alphacommercehub-api , alphacommercehub-unanswered , alphacommercehub-success-url , alphacommercehub-api-response