UPDATES EasyBlog 6.0.11 Released! Update to the latest version now!

Helpdesk

Your Time
Our Time
Response Time
24 — 48 hours
We strive to provide the fastest ever response possible. However, we are not super beings.

Allow at least 24 — 48 hours
  Support is offline
It is currently off working hours and most of us aren't around

Rest assured that we will get back to you as soon as the day starts tomorrow!
  Support is offline
None
Hi,

I'm really concerned by the security of my website and I've detect that json files in /media/com_komento give too much informations (Joomla version, Komento version and other things). These files are not secured because it's possible to get accessed to them; just by accessing to http://thesite/media/com_komento/config/xxx.json.

I agree that the filename is quite complicult but, for my point of view, it's not enough. Versions numbers are sensitive data and should not be publicly available.

Can you give advices ?

Thanks.
The replies under this section are restricted to logged in users or users with an active subscription with us