Security Health Check
Add-on ID: kv_security_health_check · Edition: CS-Cart & Multi-Vendor · Latest version: 1.0.0 · Compatible with: CS-Cart & Multi-Vendor 4.17.2 – 4.21.x, PHP 7.4 – 8.3 · Changelog: view
See the weak spots of your store on one page, with a fix for each, and know when code files change.
- Configuration checks: installer folder, admin script name, HTTPS, cron password, password rules, errors shown to visitors, PHP version.
- Risky files: backups and test files in the web root, PHP files in
imagesandvar, a world-writableconfig.local.php. - Template code: snippets, e-mail templates, documents and blocks that hold code able to reach the server.
- Staff accounts: common passwords, accounts unused for 180 days, too many root administrators.
- File changes: a hash of every PHP, template and script file, compared with the baseline you accepted: changed, new and removed files.
- Daily by cron: the result shows in the admin panel. Nothing is sent out.
These checks look for common weak spots. They cannot prove that a store is safe.
Documentation
Section titled “Documentation”| Page | Contents |
|---|---|
| Installation | Requirements, install, upgrade, uninstall |
| Configuration | Cron, permissions |
| Usage | Each check and its fix, file changes |
| FAQ | Common questions |
| Developer notes | Scan, tables |