|
|
Protected & Secure
|
|
Site protection and security are very important problems and their solving should not be only a development issue but rather a well-elaborated question on architecture level. While developing Lisk CMS a lot of attention has been paid to such security aspects as:
SQL Injection
SQL Injection is one of the most common weak spots of web applications. To solve this problem we have developed anti SQL Injection module that has been realized on a database layer of the architecture to prevent any chance of SQL injection.
Authorization protection
The site authorization is often an object of hacker attention. To ensure that Lisk Authorization is secured we paid much attention to this issue. In Lisk CMS the confidential information is never stored in sessions or cookies to prevent the possibility of data interception and usage by unauthorized parties.
File access level
In Lisk CMS file access is granted on the level of operation system to prevent unauthorized access. Also, access to the files that should not be executed or read directly (i.e. templates, engine, site files) is forbidden.
Multilevel, role play administration
Website content can be managed by several people. Providing them with access to managing of the whole site could be a considerable risk. To solve this problem Lisk CMS has a multilevel, role play site administration architecture which allows multiple administrators to manage only the areas assigned to them by the main administrator.
|
|
|
