bugmenot wrote:
this tool is a great idea! but it is quite useless in its current form for people who run localized version of joomla.
it would be nice to include instructions on how to generate the joomla_1.0.8.txt file from any joomla install package.
IMHO this tool should be made into the backend, in the next joomla release, it would certainly help with file integrity related issues, and to detect what files had been tampered with.
some features ideas:
-1- ability to check current files hash vs original files hash from the admin panel.
-2- ability to snap files hash file from admin panel.
-3- ability to save that file to a local machine for later use.
-4- ability to check current files hash vs previously save files hash from the admin panel.
the point here is
- to be always able to check vs original set of files (joomla install files should ship with a hash file)
- to be able to save a snapshot of files at any time, for example when one is finished with customizing one's own site and installing third party components/modules/plugins (still known as mambots)
- to be able to check vs this snapshot, for example to detect which file needs to be restored in case of a defaced site
- in case the admin panel is broken for some reason, it would be necessary to run diagnostic from outside admin panel, via uploading a clean diagnostic.php (found in joomla install files) and hash file (original one, or previously genertaed one) to the site. for this reason it is good to be able to export the generated hash file.
A couple of us have been working on just such a component under the project name JSecure (
http://forge.joomla.org/sf/projects/jsecure) for a couple of months. The initial goal is something very much along these lines - a generated snapshot file that can be stored on the server and downloaded. Hopefully we can get an alpha out shortly. And anyone with some time to help with the project would be welcome.
david