PHPIDS now part of Tiki Wiki CMS Groupware (tiki.org)

[marclaporte]

Hi!

Tiki Wiki CMS Groupware is a full-featured, web-based, multilingual (40+ languages), tightly integrated, all-in-one Wiki+CMS+Groupware, Free Source Software (GNU/LGPL), using PHP, MySQL, Zend Framework, jQuery and Smarty. Actively developed by a very large international community, Tiki can be used to create all kinds of Web applications, sites, portals, knowledge bases, intranets, and extranets.

Tiki is the Free/Open Source Web Application with the most built-in features:
http://tiki.org/FOSS+Web+Application...lt-in+features

One of the missing features was an Intrusion Detection System (IDS). PHPIDS has now be added to our trunk, and will be part of Tiki10 (October 2012). PHPIDS is added as a built-in feature, activated by default (but site admins can turn off). For now, there is very little integration, but over time, I'd like to see a tight integration, and we'll be upgrading with each new version. (We have 2 major releases per year)

Documentation: http://doc.tiki.org/PHPIDS
Development (bug report, feature requests): http://dev.tiki.org/PHPIDS

On behalf of the Tiki community, I would like to extend congratulations and thanks for PHPIDS. We look forward to making our sites more secure and hopefully eventually recontributing back to the project.

I see there are many implementations (ex.: WordPress). Is there a reference implementation we should look at? (ex.: as the most complete?)

Best regards,

M ;-)

Marc Laporte
Project Admin
Tiki Wiki CMS Groupware
http://tiki.org/Model -> Software made the wiki way

[marclaporte]

Hi again!

So as I wrote above, there was "very little integration" but we are committed to make it better :-)

For challenges ahead, I am seeking advice/wisdom from people with experience. There is a lengthy thread about this here:
http://thread.gmane.org/gmane.comp.cms.tiki.devel/28270

The main issue is that "PHPIDS recognizes a lot of regular Tiki input as an attack"

How have other integrations dealt with this? (and other issues in the thread)

Thanks!

M ;-)

[marclaporte]

Hi again!

So as I wrote above, there was "very little integration" but we are committed to make it better :-)

For challenges ahead, I am seeking advice/wisdom from people with experience. There is a lengthy thread about this here:
http://thread.gmane.org/gmane.comp.cms.tiki.devel/28270

The main issue is that "PHPIDS recognizes a lot of regular Tiki input as an attack"

How have other integrations dealt with this? (and other issues in the thread)

Thanks!

M ;-)

[marclaporte]

Hi again!

So as I wrote above, there was "very little integration" but we are committed to make it better :-)

For challenges ahead, I am seeking advice/wisdom from people with experience. There is a lengthy thread about this here:
http://thread.gmane.org/gmane.comp.cms.tiki.devel/28270

The main issue is that "PHPIDS recognizes a lot of regular Tiki input as an attack"

How have other integrations dealt with this? (and other issues in the thread)

Thanks!

M ;-)

[alicia45]

Hi again!

So as I wrote above, there was "very little integration" but we are committed to make it better :-)

For challenges ahead, I am seeking advice/wisdom from people with experience. There is a lengthy thread about this here:
http://thread.gmane.org/gmane.comp.cms.tiki.devel/28270

The main issue is that "PHPIDS recognizes a lot of regular Tiki input as an attack"

How have other integrations dealt with this? (and other issues in the thread)

Thanks!

M ;-)

Problem in link please check it out again..