I am trying magento's New Magento Security Scan and find out some of Unidentified Results.
Status of results are UNKNOWN.
How can i completely scan my website.
asked Oct 26, 2017 at 5:09
Add a comment
|
1 Answer
Unknown means we cannot determine the information, eg for PHP version the server might not be exposing this in the headers (which is actually good) or your admin panel might be in non-standard location (which is good too). It's recommended you manually verify those unknown results to double check eg that you use SSL for admin panel or using up to date PHP version as we cannot check this automatically.
-
Hi Piotr, some time ago I changed whatever I could to make my website safe....r, then recently what I found is that my Website is now vulnerable and Mage-report is saying that there is a problem with "Brute force attacks? unprotected", however I already added everything what can help to protect my website into .htaccess, admin url is changed, rss is disabled and blocked via .htaccess. Seems like I still missing something but can't find what. Would you please advice what else I should check to make sure I'm safe? Commented Apr 10, 2018 at 12:13
-
If you provide me with the URL we can check what is happening (email me at peter @ magento.com ). If it is Magento 1, it might be /downloader as well. Commented Apr 11, 2018 at 16:12
-
Downloader removed, every other url removed or disabled or blocked/redirected, suspicious code removed .... still getting the same message. No idea why. Commented Apr 13, 2018 at 14:40