Security

Logging
By default, StoreCore logs errors, warnings, and noticeable events to .log files in the StoreCore file system. Logging MAY be switched off by enabling the n...
Thu, 12 Oct, 2017 at 8:58 AM
Protected Configuration Files
All files with a config filename are inaccessible. These include common filenames like config.ini and config.php. This file protection is configured in ...
Thu, 12 Oct, 2017 at 8:59 AM
Protected Directories
There are three directories that MUST NOT be accessed publicly: /cache/ for cache files /logs/ for log files /StoreCore/ for the code library ...
Thu, 12 Oct, 2017 at 9:00 AM
Protected File Types
The following file extensions are inaccessible: .bak and .tmp for backup or temporary files .inc and .ssi for server-side includes .ini for initia...
Thu, 12 Oct, 2017 at 8:59 AM
SSL Modes
StoreCore supports four SSL modes per store. This ssl_mode is a 4 bit value stored as a decimal integer in the core sc_stores table. The binary bitmask is o...
Thu, 12 Oct, 2017 at 9:01 AM