Difference between revisions of "Security Steps"

Revision as of 07:38, 7 April 2016

It is always good to have proper security measures in place for any script or software. We recommend implementing the following security steps in order to have additional security for your script/website.

Static IP Settings – If you are a single admin and using a Static IP, then it is better to enable Static IP option so that no one else can login to your account apart from you.Kindly follow these steps for the same:
- Open AdminPanel
- Click On Settings
- Click On Security Settings
- Select Use Static IP :Yes
- Click on "Update"
2-step Authentication – You can use Google’s 2-Step Verification, which is a latest and safest security measure.Kindly follow these steps for the same:
- Open Adminpanel
- Click On Settings
- Click On Security Settings
- Click On 2-Step Verification Settings
- Select Enable Google 2-Step Verification: Yes
- There are two ways to Google 2-Step Verification:
  1) QR Code
  2) Secret Key
- If you want to use Scan A Image "Select A Means To Set Up Google 2-Step Verification": QR Code
- Enter Admin Password : Enter your Admin Password here
- Click on Update
- Enter The Code Generated Here: You need to enter the code that is generated after scanning the image here
- Click on Update
- If you want to use Secret Key "Select A Means To Set Up Google 2-Step Verification": Secret Key
- Enter Admin Password : Enter your Admin Password here
- Click on Update
- Enter The Code Generated Here : You need to enter the code that is generated after fulfilling above steps here.
- Click on Update
- Next time, when you log in to your Admin Panel after entering the admin area details, you will need to enter the Authenticator Code as below
Password Protected Directory (app/webroot/adminpanel) – You can make your admin area password protected from cPanel. Kindly follow these steps for the same:
- Open cPanel
- Click on Password Protect Directories
- Click the folder icon to select directory path admindirectory
  Click on adminpanel directory name
  Path: public_html/app/webroot/adminpanel
- Next Create User
- Next check on checkbox next to “Password protect this directory” and enter "adminpanel" in the field “Enter a name for the protected directory”. Then click on Save button.
- You will see next page with"Permissions Updated"

@@ Line 27: / Line 27: @@
 <li>Select Enable Google 2-Step Verification: <b> Yes</b></li>
   <xa class='fancybox-effects-d' href='https://www.proxscripts.com/docs/images/passwordprotectauthenticator/step4.png' title=''><img src='https://www.proxscripts.com/docs/images/passwordprotectauthenticator/step4.png' alt='' style='padding:2px;margin:1px;'/></xa>
-<li>If You Use Scan A <b>Image</b> "Select A Means To Set Up Google 2-Step Verification": <b> QR Code</b></li>
+<li>There are two ways to Google 2-Step Verification: <br/>
-<li>Enter <b>Admin Password</b></li>
+) QR Code <br/>
+) Secret Key
+</li>
+<li>If you want to use Scan A <b>Image</b> "Select A Means To Set Up Google 2-Step Verification": <b> QR Code</b></li>
+<li>Enter <b>Admin Password : </b> Enter your Admin Password here</li>
   <xa class='fancybox-effects-d' href='https://www.proxscripts.com/docs/images/passwordprotectauthenticator/step5.png' title=''><img src='https://www.proxscripts.com/docs/images/passwordprotectauthenticator/step5.png' alt='' style='padding:2px;margin:1px;'/></xa>
 <li>Click on <b>Update</b></li>
 <xa class='fancybox-effects-d' href='https://www.proxscripts.com/docs/images/passwordprotectauthenticator/step6.png' title=''><img src='https://www.proxscripts.com/docs/images/passwordprotectauthenticator/step6.png' alt='' style='padding:2px;margin:1px;'/></xa>
-<p>Download Of Google Authenticator App Available Here.</p>
+<p>Download Of Google Authenticator App Available for Android, iOS and Windows. Click on the below respective operating system to download the App.</p>
 <xa href="https://play.google.com/store/apps/details?id=com.google.android.apps.authenticator2&hl=en" target="_blank"><img src='https://www.proxscripts.com/docs/images/passwordprotectauthenticator/android.png' alt='' style='padding:2px;margin:1px;'/></xa>
 <xa href="https://itunes.apple.com/in/app/google-authenticator/id388497605?mt=8" target="_blank"><img src='https://www.proxscripts.com/docs/images/passwordprotectauthenticator/iphone.png' alt='' style='padding:2px;margin:1px;'/></xa>
 <xa href="https://www.microsoft.com/en-us/store/apps/authenticator/9nblggh08h54" target="_blank"><img src='https://www.proxscripts.com/docs/images/passwordprotectauthenticator/windows.png' alt='' style='padding:2px;margin:1px;'/></xa><br/>
-<li>Step Of Scan Image In Device Follow This Step:<br/><ul>
+<div class="important"><li>Steps to Follow to Scan Image in Device:<br/><ul>
-<li>In App Top Of The Right Side Click</li>
+<li>In the Application, click on the top Right hand side</li>
 <li>Click On <b>Set Up Account</b></li>
 <li>Click A <b>Scan a barcode</b></li>
-<li>Now Put Your Device Of Front Of Image And Scan A Image .</li></ul></li>
+<li>Now, put your device in front of the Image and scan the image.</li></ul></li></div>
 <xa class='fancybox-effects-d' href='https://www.proxscripts.com/docs/images/passwordprotectauthenticator/step7.png' title=''><img src='https://www.proxscripts.com/docs/images/passwordprotectauthenticator/step7.png' alt='' style='padding:2px;margin:1px;'/></xa>
-<li>Enter The Code Generated Here:</li>
+<li>Enter The Code Generated Here: You need to enter the code that is generated after scanning the image here</li>
 <xa class='fancybox-effects-d' href='https://www.proxscripts.com/docs/images/passwordprotectauthenticator/step8.png' title=''><img src='https://www.proxscripts.com/docs/images/passwordprotectauthenticator/step8.png' alt='' style='padding:2px;margin:1px;'/></xa>
 <li>Click on <b>Update</b></li>
 <xa class='fancybox-effects-d' href='https://www.proxscripts.com/docs/images/passwordprotectauthenticator/step9.png' title=''><img src='https://www.proxscripts.com/docs/images/passwordprotectauthenticator/step9.png' alt='' style='padding:2px;margin:1px;'/></xa>
-<li>If You Use A <b>Secret Key</b> "Select A Means To Set Up Google 2-Step Verification": <b> Secret Key</b></li>
+<li>If you want to use <b>Secret Key</b> "Select A Means To Set Up Google 2-Step Verification": <b> Secret Key</b></li>
-<li>Enter <b>Admin Password</b></li>
+<li>Enter <b>Admin Password : </b> Enter your Admin Password here</li>
   <xa class='fancybox-effects-d' href='https://www.proxscripts.com/docs/images/passwordprotectauthenticator/step10.png' title=''><img src='https://www.proxscripts.com/docs/images/passwordprotectauthenticator/step10.png' alt='' style='padding:2px;margin:1px;'/></xa>
 <li>Click on <b>Update</b></li>
 <xa class='fancybox-effects-d' href='https://www.proxscripts.com/docs/images/passwordprotectauthenticator/step11.png' title=''><img src='https://www.proxscripts.com/docs/images/passwordprotectauthenticator/step11.png' alt='' style='padding:2px;margin:1px;'/></xa>
-<p>Download Of Google Authenticator App Available Here.</p>
+<p>Download Of Google Authenticator App Available for Android, iOS and Windows. Click on the below respective operating system to download the App.</p>
 <xa href="https://play.google.com/store/apps/details?id=com.google.android.apps.authenticator2&hl=en" target="_blank"><img src='https://www.proxscripts.com/docs/images/passwordprotectauthenticator/android.png' alt='' style='padding:2px;margin:1px;'/></xa>
 <xa href="https://itunes.apple.com/in/app/google-authenticator/id388497605?mt=8" target="_blank"><img src='https://www.proxscripts.com/docs/images/passwordprotectauthenticator/iphone.png' alt='' style='padding:2px;margin:1px;'/></xa>
 <xa href="https://www.microsoft.com/en-us/store/apps/authenticator/9nblggh08h54" target="_blank"><img src='https://www.proxscripts.com/docs/images/passwordprotectauthenticator/windows.png' alt='' style='padding:2px;margin:1px;'/></xa><br/>
-<li>Step Of Secret Key Get  In Device Follow This Step:<br/><ul>
+<div class="important">
-<li>In App Top Of The Right Side Click</li>
+<li>Steps to Follow to Secret Key in Device:<br/><ul>
+<li>In the Application, click on the top Right hand side</li>
 <li>Click On <b>Set Up Account</b></li>
 <li>Click A <b>Enter provided key</b></li>
-<li>Enter account name its optional </li>
+<li>You will need to enter the following information for <b>Manual account entry</b></li>
-<li>Enter your key</li></ul></li>
+<li>Enter account name :  Enter your account name here. Please note that this is an optional field. It is not a must/mandatory.</li>
+<li>Enter your key : You need to enter the key here that is generated after you click on <b>Update</b>.</li>
+<li>Time based : If you choose time based token, then the number will change on its own after every few seconds. You will need to enter the token before the timer ends.</li>
+<li>Counter based : If you choose counter based token, there is no restriction on the time on when to enter the code. You can refresh a button to change the code.</li>
+</ul></li></div>
 <xa class='fancybox-effects-d' href='https://www.proxscripts.com/docs/images/passwordprotectauthenticator/step12.png' title=''><img src='https://www.proxscripts.com/docs/images/passwordprotectauthenticator/step12.png' alt='' style='padding:2px;margin:1px;'/></xa>
-<li>Enter The Code Generated Here:</li>
+<li>Enter The Code Generated Here : You need to enter the code that is generated after fulfilling above steps here.</li>
 <xa class='fancybox-effects-d' href='https://www.proxscripts.com/docs/images/passwordprotectauthenticator/step13.png' title=''><img src='https://www.proxscripts.com/docs/images/passwordprotectauthenticator/step13.png' alt='' style='padding:2px;margin:1px;'/></xa>
 <li>Click on <b>Update</b></li>
 <xa class='fancybox-effects-d' href='https://www.proxscripts.com/docs/images/passwordprotectauthenticator/step14.png' title=''><img src='https://www.proxscripts.com/docs/images/passwordprotectauthenticator/step14.png' alt='' style='padding:2px;margin:1px;'/></xa>
-<li>Now Next Time Login In Adminpanel That Time Display Step 2 Enter <b>Authenticator Code</b></li>
+<li>Next time, when you log in to your Admin Panel after entering the admin area details, you will need to enter the <b>Authenticator Code</b> as below</li>
 <xa class='fancybox-effects-d' href='https://www.proxscripts.com/docs/images/passwordprotectauthenticator/step15.png' title=''><img src='https://www.proxscripts.com/docs/images/passwordprotectauthenticator/step15.png' alt='' style='padding:2px;margin:1px;'/></xa>
 <div class="important">
-    <p>Note:If You Use to Google 2-Step Verification In Member Area</p>
+    <p>Note:If you want to use Google 2-Step Verification for Member's Area, then set as displayed in the below image.</p>
     <p>Enable Google 2-Step Verification:<b>Yes</b></p><br/>
     <xa class='fancybox-effects-d' href='https://www.proxscripts.com/docs/images/passwordprotectauthenticator/step16.png' title=''><img src='https://www.proxscripts.com/docs/images/passwordprotectauthenticator/step16.png' alt='' style='padding:2px;margin:1px;'/></xa><br/>