Changeset 699 for trunk/phpbms/install

Timestamp:

01/01/10 11:51:27 (2 years ago)

Author:

brieb

Message:

• Added more severe checking for encrytion key file
• Added security tips on implementing payment encryption
• Added mailchimp update.php so module would display as not installed during update process

Location:

trunk/phpbms/install

Files:

• index.php (modified) (1 diff)
• update.php (modified) (2 diffs)

trunk/phpbms/install/index.php

@@ -384 +384 @@
                                 </ul>
 
-                                <h2>Suggested Security Steps</h2>
+                                <h2>Additional Security Steps</h2>
 
                                 <ul>
+                                        <li>
+                                                <h3>Payment Information Encryption</h3>
+                                                <p>
+                                                    If you plan on storing sensitive payment information such as credit card
+                                                    numbers make sure to enable the encrption option in the configuration page
+                                                    underneath the BMS module section. You will also need to create and link
+                                                    to an external file on the server that contains the encryption key. Typically,
+                                                    encyrption key files are text files containing a 64-128 character hash.
+                                                </p>
+                                        </li>
+
                                         <li>
                                                 <h3>Run phpBMS On a Secure Connection (SSL)</h3>

trunk/phpbms/install/update.php

@@ -223 +223 @@
                                 <h1>Update Modules</h1>
 
+                                <p>
+                                    To install a module that is not currently installed, wait unitl the update process
+                                    has completed successfully.  Then run the installation script and skip to the "install
+                                    modules" section.
+                                </p>
+
                                 <?php $updater->showModulesUpdate(); ?>
 
@@ -292 +298 @@
                                                 </p>
                                         </li>
+                                        <li>
+                                                <h3>Payment Information Encryption</h3>
+                                                <p>
+                                                    If you store sensitive payment information such as credit card
+                                                    numbers make sure to enable the encrption option in the configuration page
+                                                    underneath the BMS module section. You will also need to create and link
+                                                    to an external file on the server that contains the encryption key. Typically,
+                                                    encyrption key files are text files containing a 64-128 character hash.
+                                                </p>
+                                        </li>
 
                                 </ul>