Đăng nhập khu vực quản trị

Embed Size (px)

Citation preview

  • 7/31/2019 ng nhp khu vc qun tr

    1/21

    ng nhp khu vc qun tr

    1ng nhp khu vc qun trNu bn ng dn site ca bn l http://my-domain.com / th ng dn ng nhp khu vcqun tr l http://my-domain.com /admin/

    Nu bn ng dn site ca bn lhttp://my-domain.com/portal/th ng dn ng nhp khuvc qun tr lhttp://my-domain.com/portal/admin/

    Khi mn hnh hin th ng nhp nh sau:

    http://my-domain.com/portal/http://my-domain.com/portal/http://my-domain.com/portal/http://my-domain.com/portal/admin/http://my-domain.com/portal/admin/http://my-domain.com/portal/admin/http://my-domain.com/portal/admin/http://my-domain.com/portal/
  • 7/31/2019 ng nhp khu vc qun tr

    2/21

    Bn cn nhp b danh v mt khu lc ci t site truy cp vo khu vc qun tr.Hoc c thdng ti khon thnh vin c ngi qun tr cp quyn vo khu vc qun tr qun l ccmodule.

    2Cu hnh site

    Khu vc cu hnh site ny ch dnh cho ngi iu hnh ti cao v ngi iu hnh chung casite, cc iu hnh module khng c truy cp vo khu vc ny.

    2.1Cu hnh theo ngn ng

  • 7/31/2019 ng nhp khu vc qun tr

    3/21

    Phn ny s p dng cho site theo tng ngn ng, nu site ca bn c nhiu ngn ng khc nhaubn cn thit lp cc thng s ny theo tng ngn ng.

    Ch thch:

    Tn gi ca site, M t ca site: hin th trn thanh tiu ca trnh duyt Giao din mc nh site: L giao din c s dng mc nh cho cc cc module nu

    khi cu hnh module chn giao din mc nh.

  • 7/31/2019 ng nhp khu vc qun tr

    4/21

    Module mc nh trn trang ch: Module ny s c gi khi truy cp bng vo trang chca site.

    Site ngng hot ng: Bnh thng mc ny khng c chn, nu chn mc ny th chc ngi qun tr mi nhn thy thng tin ca site, cc thnh vin khc s c thng bobng ni dung ca : Ni dung thn

    Tin trnh t ng

    Tin trnh t ng

    Trong h thng NukeViet 3 c cc tin trnh t ng, thc thi cc cng vic chy t ngtrong site.

  • 7/31/2019 ng nhp khu vc qun tr

    5/21

    Mc nh trong h thng c cc tin trnh sau

    o Xa cc dng ghi trng thi online c trong CSDLo T ng lu CSDLo Xa IP log files Xa cc file logo truy cpo Xa cc file error_log qu hno Xa cc referer qu hn

    Cu hnh SMTP

  • 7/31/2019 ng nhp khu vc qun tr

    6/21

    Cu hnh SMTP

    Trong mt s trng hp my ch ca bn khng c hm mail hoc hm mail b chn. cth gi mail c bn cn cu hnh gi mail bng SMTP

    V d dng ti khon gmail:

    My ch (SMTP) Th Gi: smtp.gmail.com

    Cng gi mail: 465 hoc 587

  • 7/31/2019 ng nhp khu vc qun tr

    7/21

    S dng Xc thc: SSL

    Tn Ti khon: (ti khon email ca bn, c c @gmail.com)

    Mt khu:(Mt khu ng nhp gmail)

    Nu dng SMTP gi mail c s dng SSL th my ch cn h tr th vin openssl. kim tra xem my ch ca bn c h tr hay khng xem theo hng dn sau:

    Vo menu Thng tin -> Tin ch m rng tm xem c on sau khng

    Qun l block

    Qun l block

    Ti chuyn mc qun l block ca giao din s c th hin nh Hnh 1

  • 7/31/2019 ng nhp khu vc qun tr

    8/21

    Hnh 1: Giao din qun l block theo theme

    -Ta s tm hiu k tng thnh phn trong ny:

    + Qun l block:modern : th hin vic qunl block trn theme ang s dng

    + Hy la chn:Gip la chn theme m mun qun l block theo theme

    + Chn module:Gip la chn cc module m c cha cc block c th hin trnmodule

  • 7/31/2019 ng nhp khu vc qun tr

    9/21

    + V tr: y chnh l v tr t cc block

    + Tn block:t tn cho block d qun l

    + Cc function:y chnh l gii hn t block trn cc module. Phn ny s c tm

    hiu k hn chuyn mc module

    + Chc nng sa xa block

    Ngoi ra cn mt s tnh nng na cc bn t tm hiu do c vit bng ting Vit ln nhn quabn cng c th hnh dung ngay c mt s cc tnh nng ca n.

    1.1.1Thm block

    thm mt blockbn c 2 cch thm block

    a. Thm block ti trang qun l admin Qun l giao din>thm block

  • 7/31/2019 ng nhp khu vc qun tr

    10/21

    Hnh 2: Giao din Thm block l block.

    Sau chn File > Hy chn dng:

    - C 2 loi block l block dng chung cho tt c cc module hay cn gi l block dng chung(global)

    + Dng global gm cc block mc nh nh hnh 3

  • 7/31/2019 ng nhp khu vc qun tr

    11/21

    Hnh 3: Cc block dng chung cho h thng

    + Block theo module mnh ly v d module tin tc(news) nh hnh 4

    Hnh 4

  • 7/31/2019 ng nhp khu vc qun tr

    12/21

    Sau khi chn c block ta s tin hnh t tn cho block v to giao din cho n nh hnh 5

    Hnh 5

    C 2 dng template cho block l theo mu v khng c tiu (no_title)

    Ngoi ra cn c cc chc nng khc nh v tr th hin, ngy ht hn, quyn xem, kch hotblock, sau ta tin hnh p dng trn ton site ch hnh thc ny ch p dng c cho ccblockdng chung (global) cn blokc cho module th ch th hin trn module m thi, hoc

    p dng trn cc function nh hnh 6

  • 7/31/2019 ng nhp khu vc qun tr

    13/21

    Hnh 6

    hiu r hn v cc function ny bn cn nghin cu v cu trc module

    Cui cng l chp nhn lu ci t, sau ra trang ch xem kt qu

    1.1.2Sa, xa mt block

  • 7/31/2019 ng nhp khu vc qun tr

    14/21

    ng nhp admin qun l giao din => qun l block =>sa hoc xa mt block bt k nh hnh7

    Hnh 7

    1.1.3Qun l block trn trang ch

    n nhp admin sau ra trang ch => di chuyn xung di chn chc nng bt, tt ko th

    block qun l vic theme block hay di chuyn v tri cc block

  • 7/31/2019 ng nhp khu vc qun tr

    15/21

    Hnh 8: giao din qun l block ti trang ch

    Tip theo ta s thc hin vic thm mt block. Chn chc nng thm block vo khu vc ny

    Giao din s nh sau

  • 7/31/2019 ng nhp khu vc qun tr

    16/21

    Hnh 9: Giao din thm block ngoi trang ch

    - Chn kiu block:

    + dng file :c cc dng global (dng chung cho tt c module) v dang block hin th theomodule

    + khi qung co:.

    + Dng HTML:chn cc block dng html(khng dng th iframe, v cc on m java...)

    + Ly t Rss : ly tin tc rss t trang bt k c dnghttp://dantri.com.vn/the-thao.rss

    http://dantri.com.vn/the-thao.rsshttp://dantri.com.vn/the-thao.rsshttp://dantri.com.vn/the-thao.rsshttp://dantri.com.vn/the-thao.rss
  • 7/31/2019 ng nhp khu vc qun tr

    17/21

    Hng dn bo mt website NukeViet 3

    NukeViet 3 cung cp nhiu cng c v gii php bo mt gip ngi qun tr c nhng cng chu hiu nhm ty bin h thng, gip h thng tr ln kn o v an ton hn trc s soi mica cc hacker. Bi vit ny tng hp v chia s kinh nghim cng nh gii php bo mt chowebsite s dng m ngun m NukeViet 3.

    1. Hy lun cp nht phin bn

    Vic u tin bn cn lm l lun cp nht cc phin bn mi nht ca NukeViet vic ny lhon ton min ph v gip chng ta sa cha cc li phin bn c, cp nht thm cc tnhnng mi cho h thng v cc module.

    Ngoi cch cp nht cc phin bn pht hnh, bn c th cp nht cc bn cp nht hng ngytheo chc nng cp nht phin bn.

    Mt ch trong vic pht trin thm tnh nng ca site, bn khng nn hin th cc thng tin caphin bn NukeViet bn ang s dng (ch hin th cho ngi iu hnh tt cao ca site xem).

    2. Hn ch s dng cc module v block

    Hy s dng cc module v block mt cch hn ch, c ngha l ch ci nhng module v blockno tht cn thit, s trch c cc li (bug) tim n trong bn thn module v block.

    Nu module no khng s dng, bn cn tin hnh xa trong cng c qun tr ca NukeViet.

    3. Chn truy cp th mc khng c php

    Cch ny nhm trnh nhng ngi c ch tm khng tt khai thc thng tin v site ca bn, ridng thng tin d li v khai thc. Rt nhiu nh cung cp dch v Hosting hay Webmaster ngm nh ch cho php xem danh sch cc file ca th mc. Tuy nhin, bn nn loi bkh nng xem ni dung th mc bng cch to file file index.html trong tt c cc th mc.

    Ngoi ra bn cn thm file .htaccess c ni dung: deny from all cho tt c cc th mc khngcho php truy cp trc tip (ch khi dng file .htaccess ny tt c cc file trong th mc ny skhng truy cp trc tip c).

    Nu l ngi pht trin module bn nn lu khng cho truy cp trc tip cc th mc sau cami module:

    modules/about/admin

    modules/about/blocks

    modules/about/funcsmodules/about/language

  • 7/31/2019 ng nhp khu vc qun tr

    18/21

    (Ch cch bo v th mc bng file .htaccess ch p dng c cho hosting dung my ch webApache, cc my ch dng IIS s khng c bo v, v vy nu c th, bn nn chuyn sangdng h iu hnh linux dng my ch web Apache).

    Ngoi ra bn nn chn cc loi bots d ti cc th mc nhycm ca bn bng cch chn code

    sau vo file robots.txt trn th mc root:

    Disallow: /dir_name/

    Disallow: /file_name.ext

    4. Vn Chmod:

    Chmod th mc public_html thnh 710 v cc th mc cn li thnh 701, vic ny s gip bnbo v c cu trc website ca mnh.

    Cc th mc cache, data , files, logs, sess, tmp, uploads (v tt c cc th mc con ca chng)cn chmod 755 (mt s host cn chmod 777) h thng c th ghi file.

    Chmod tp tin config.php thnh 400, iu ny chng hacker local v view source ca tp tin ny.

    5. Thng tin Admin

    Thng th mc ch user ca qun tr vin l admin v khng thay i c, iu ny lm chocc hacker ch cn on pass, vic cn lm l thay i tn admin.

    Do bn nn i tn ti khon admin thnh 1 tn ring no ch c site bn s dng.

    Ngoi ra bn c th bo v khu vc admin 1 hoc nhiu cch sau:

    5.1 i tn th mc admin:

    Bn hy i tn th mc adminthnh 1 ci tn no m ch bn v cc thnh vin ban qun trsite c bit v d adm2457

    Khi bn cn sa file includes /constants.php, tm n dng

    //Ten thu muc admin

    define( "NV_ADMINDIR", "admin" );

    //Ten thu muc editors

    define( "NV_EDITORSDIR", "admin/editors" );

  • 7/31/2019 ng nhp khu vc qun tr

    19/21

    Sa thnh:

    //Ten thu muc admin

    define( "NV_ADMINDIR", "adm2457" );

    //Ten thu muc editors

    define( "NV_EDITORSDIR", "adm2457/editors" );

    5.2 Bt chcaptcha trong khi ng nhp:

    Bn c th chn cht ng nhp c yu cu captcha ty theo nhu cu bo v site bng cchcu hnh hin th captcha trong phn Cu hnh -> Cu hnh chung.

    5.3 Bt ch Kim tra IP khi truy cp khu vc admin

    Nu Bn c IP tnh, hoc ch truy cp site trong gii IP c nh, Bn c th cu hnh chc nngny trong phn: Qun tr -> Cu hnh site.

    thc hin vic ny bn cn thm a ch IP hoc di IP truy cp vo admin vo phn di

  • 7/31/2019 ng nhp khu vc qun tr

    20/21

    Sau Sa phn cu hnh Kim tra IP khi truy cp khu vc admin v lu li.

    5.4. Bo v th mc admin bng chc nng bo v th mc ca hosting

    Nu hosting ca bn c h tr chc nng bo v th mc bng ti khon v mt khu, bn nndng chc nng ny bo v th mc admin. Nu hosting ca bn khng h tr bn c thdng chc nng Kim tra tng la cho khu vc admintrong phn cu hnh ca menu quntr.

  • 7/31/2019 ng nhp khu vc qun tr

    21/21

    6. Giu file config.php

    File config.php l file cha tt c nhng g quan trng nht, v vy vic khng view c sourceca file ny rt quan trng. bn nn i tn file di chuyn n 1 v tr ngi khc kh onra.

    Sau khi i tn v i ng dn file config.php, cc bn tm file includes /constants.php

    Tm n dng:

    //Ten file config

    define( "NV_CONFIG_FILENAME", "config.php" );

    Edit li cho ph hp vi path v tn file config.php

    V d: trn hosting cc file c t trong th mc /public_html/ , bn c th i tnfile config.php thnh cfg.nkv v di chuyn n ra ngoi th mc /public_htm/ (khi file cfg.nkv nm ngang hng vi th mc/public_html/) khi dng.

    define( "NV_CONFIG_FILENAME", "config.php" );

    s c sa thn:

    define( "NV_CONFIG_FILENAME", "../cfg.nkv" );

    7. Thay i ng dn ti cc th mc h thng

    Cc th mc sau bn nn i tn: cache, data , files, logs, sess, tmp sau khi i tn cc th mcny bn cn khai bo li cc thng s ny vo file includes/constants.php

    8. M ho file cu hnh h thng

    ha cc file php bn c th chn IonCube v ZendGuard 5. Vic m ha file nu b xemthng tin s kh m gii m c (kh khng c ngha l khng th ).

    Cc file bn cn thit ho file config.php v includes/constants.php Nu c iu kin bn mha tt c cc file *.php ca site.