3. Steps to fortify VTiger security
Question
Is there any security issue if VTiger is running on older php versions
Answer
Kindly, make sure to take the following precautionary measures (sorted by the most important first) to make your CRM system more secure
Do not easy to guess user/pass: admin/admin, test/test, demo/demo, etc..
Deactivate any test/developer/temporary users.
Not use the same 'admin' password across multiple instances
Do not use your own email to test MailConverter, MailManager, Outgoing EMail Server. (This is extremely important. If someone breaches your vtiger instance && there is an email account, they can download/search messages for certain strings to locate other instances).
Have proper .htaccess restrictions, where folders cannot be viewed
Add 2-FA through Cloudflare
If you had #6 added (2faCloudflaree), everything else would not matter, because Cloudflare 2fa works as a VPN without VPN's usability issues.
| Extension | vTiger default |
|---|---|
Description | Steps to fortify VTiger security |
Created by | Salman (March 02, 2023) |
Last updated