Sansec is proud to add Sylius to our list of supported platforms. Sansec eComscan now integrates with Sylius 1 and Sylius 2 and will run deep searches to hunt for malware & vulnerabilities.
While Sansec eComscan works on all self-hosted eCommerce platforms, its integration with specific platforms will enable detections where generic security software will never look.
Sansec has investigated eCommerce breaches since 2015. We run the largest forensic practice in the industry and analyze dozens of hacked stores every week. That work feeds our threat intelligence, and that intelligence is what eComscan checks your files against. Sylius now gets the same coverage.
Sylius is built on Symfony, so it ships with firewalls, role based access and CSRF protection. That foundation is pretty secure already, but it does not make a store immune.
Most breaches we investigate do not break the framework core. They start with stolen credentials, outdated dependencies, or third party code that no free scanner ever reads.
Sylius itself has patched a steady stream of cross site scripting (XSS) flaws. Attackers use XSS to plant payment skimmers and hijack admin sessions:
A patched core is only half the job. Stores run payment plugins, marketing integrations and bespoke bundles, and that custom code is where attackers hide. A skimmer in a Twig template or a webshell in a writable directory passes every version check. You have to scan the files on disk.
eComscan reads every file in your Sylius installation and flags what does not belong:
public/, var/ and other writable paths.The scan runs on any Linux based hosting, needs no database changes and does not slow down your storefront.
Point eComscan at your Sylius document root and run a scan. The usage guide covers installation and the first scan. For a hardening checklist built for Sylius, see our new Sylius security guide.
此内容由惯性聚合(RSS阅读器)自动聚合整理，仅供阅读参考。 原文来自 — 版权归原作者所有。