Hide the version number

timdorr · **Hide the version number -** 16-03-2007, 06:54 AM

Why does this need to be shown? It just advertises your installation as being vulnerable if a security breach is found in the code. Customers don't need to know, staff doesn't need to know, and the admins should know what version they already have. It just makes it easier for a hacker to pop a particular version string into Google and find all the hacking targets they want.

IPB and phpBB stopped showing the version number of their software publicly for the same reasons.

supportskins · 16-03-2007, 10:21 AM

I second this

Bconsulting · 16-03-2007, 07:24 PM

I agree with this also...makes perfect sense... we can see it in the administration panel.

Mikie · 16-03-2007, 08:28 PM

Absolutely, we are still see referrals from google from hackers searching for v2.3.2 and 2.3.5 of Kayako so they can find the installations vulnarable to the autoclose hole that was never fixed.

**Digital Mayhem** · 16-03-2007, 08:54 PM

so edit /themes/admin_default/loginform.tpl and remove it like we did

Mikie · 16-03-2007, 09:19 PM

Quote:

Originally Posted by XeSolutions

so edit /themes/admin_default/loginform.tpl and remove it like we did

Thats not the point is it? We already handled that situation. The point is why show the version number at all?

Thread Tools	Search this Thread
Show Printable Version Email this Page	Search this Thread: Advanced Search
Display Modes	Rate This Thread
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode	Rate This Thread:

supportskins Offline Senior Member Posts: 3,692 Join Date: Aug 2006 Location: Mumbai, India	16-03-2007, 10:21 AM I second this Professional and Affordable Kayako Skins - Specialists in Kayako Skinning & Customization - Professional Paid Support Our Skins and Services - http://www.supportskins.com/store/ SupportSkins.com - http://www.supportskins.com/

Bconsulting Offline Member Posts: 94 Join Date: Sep 2005 Location: Earth Most Of The Time	16-03-2007, 07:24 PM I agree with this also...makes perfect sense... we can see it in the administration panel.

Mikie Offline Member Posts: 153 Join Date: Jan 2004	16-03-2007, 08:28 PM Absolutely, we are still see referrals from google from hackers searching for v2.3.2 and 2.3.5 of Kayako so they can find the installations vulnarable to the autoclose hole that was never fixed.

Digital Mayhem Offline Community Moderator Posts: 874 Join Date: May 2005 Location: Henderson, Nevada	16-03-2007, 08:54 PM so edit /themes/admin_default/loginform.tpl and remove it like we did Steve Digital Mayhem, Inc. AIM: Steve.Lawrence@Digital-Mayhem.com MSN: Steve.Lawrence@Digital-Mayhem.com GTALK: Steve.Lawrence@Digital-Mayhem.com YAHOO: DigitalMayhem_Steve SKYPE: DigitalMayhem_Steve I'm Important