Comment to 'I was looking at the various security features of my host, which...'
  • I want to comment further on the Ninja Firewall idea of use inside UNA. The quirks of operation with the Pro versus the Pro+ versions are as follows. The mere Pro version does not whitelist the IP address of the Admin, and hence, if the Admin is doing something like adding an injection into the platform, this can trigger a 404-page redirect when trying to access the Settings module in the Studio. To get around this, you will have to turn the firewall off by way of changing the extension on the file placed in the root directory to php.ini.txt or .user.ini.txt. or in this case, remove the firewall script from the .htaccess file until you are done working with the Settings module. In the Pro+ version the Admin IP address is whitelisted and hence you do not have to bother with this problem. Hence, if you are done developing the platform in terms of using the Settings module, then you can reinstall the firewall application.

    The license for this firewall is a GNU license, that says in the license that it can be copied and changed, contrary to the preamble.

    "To protect your rights, we need to prevent others from denying you

    these rights or asking you to surrender the rights. Therefore, you have

    certain responsibilities if you distribute copies of the software, or if

    you modify it: responsibilities to respect the freedom of others.

    For example, if you distribute copies of such a program, whether

    gratis or for a fee, you must pass on to the recipients the same

    freedoms that you received. You must make sure that they, too, receive

    or can get the source code. And you must show them these terms so they

    know their rights.

    Developers that use the GNU GPL protect your rights with two steps:

    (1) assert copyright on the software, and (2) offer you this License

    giving you legal permission to copy, distribute and/or modify it."