discuz! system security Performance and Defense Performance Settings guide

Different sites have different levels of security requirements, http://www.aliyun.com/zixun/aggregation/12899.html "> Sing (Comsenz) launched the discuz! system to allow site managers, The Forum security settings in config.inc.php in the custom profile are derived from the security level of the tuning site, while also enhancing the security and defensive performance of the Forum.

The picture above is discuz! After the default installation, config file default settings, if the administrator needs to change this security settings, can be found in the Forum Directory, config file opened after the change can be saved. You can use Notepad or other programming software when editing a configuration file.

The following is an explanation of the options for Forum security settings:

1, $forumfounders = ' 1 ';

The founder of the Forum UID. Can support multiple founders, using "," delimited. The founder of the authority will be higher than the general administrator, some important backstage functions only after the founder login, can be managed, such as: Management personnel, template management, database backup and recovery, access to ucenter, etc., so by setting up the founder of the Forum account, can greatly enhance the security level of the forum. Add Forum Founder method See: http://faq.comsenz.com/viewnews-861

2, $attackevasive = 0;

A forum defense level that prevents a denial of service attack from a large number of irregular requests. The meaning of the data is: 0 = close, 1 = cookie Refresh limit, 2 = Restrict proxy access, 4 = two requests, 8 = answer the question (you need to answer the question for the first visit). If you need to set up a variety of defense levels, you can use the | You can set this to 2|8 when you combine the number of levels, such as restricting proxy access and requiring you to answer the question the first time you access it.

3, $urlxssdefend = 1;

Forum access page Defense switch. Can avoid users through the illegal URL address to the site users harm, the default value of 1, that is, open, not recommended to modify to 0.

4, $ADMINCP = Array ();