There was an error while loading. Please reload this page.
Document Connection Doctor access control and why a block list is observable Renames the Site definition limits area to Site and Tools Limits and documents the new Connection Doctor access option: what the three modes are, why the option exists (the Forbidden IP Ranges list can only ever be as complete as the operator made it, and the Connection Doctor is what turns an unlisted internal host into a readable one), and the explicit trade that restricting it moves the support burden onto the operator. Adds a standalone "A block list is always observable" section. Anyone who can add or edit a site can infer the deny list by submitting addresses and noting which are refused. This is not fixable — the acceptance or refusal is itself the answer, whatever the error message says — and it is not specific to Panopticon. The section makes the iptables comparison explicitly: you cannot enforce a boundary against somebody without that somebody being able to detect where the boundary is. The section is written to be linkable as a considered, public position, because this will be reported as a vulnerability with an inflated impact assessment sooner or later. It states what an adversary actually learns (which addresses the operator chose to list — a fact about configuration, not about what runs there), why that knowledge is only useful as reconnaissance for a read they can be denied, that the only complete fix is not offering self-service site creation at all, and that this use case is optional and off by default. It also states the two things which remain visible regardless — blind request initiation through background tasks, and the up/down signal from uptime monitoring — so the operator's risk assessment is made against the real picture rather than a flattering one. Also adds a Connection Troubleshooting entry and a note on the Connection Doctor page itself for users who find the tool missing. Signed-off-by: Nicholas K. Dionysopoulos <nicholas@akeeba.com>
Fill documentation gaps, fix accuracy issues, and add missing pages New pages: - Backup-Tasks.md — scheduling Akeeba Backup jobs per site - Scanner-Tasks.md — scheduling Admin Tools PHP File Change Scanner jobs per site - Tasks.md — central task management admin page - Database-Backups.md — Panopticon's own database backup feature - Connection-Doctor.md — in-app connection diagnostic tool Accuracy fixes: - Home.md: PHP minimum updated from 8.1/8.2 to 8.3/8.4 (matches AKEEBA_PANOPTICON_MINPHP) - Managing-Sites.md: connector section updated to include Joomla 6 - CLI-setup.md: add --loop to task:run cron examples; add further CLI commands section - Plugin-Events.md: fix wrong event name (onTaskBeforeJoomlaUpdate → onBeforeJoomlaUpdate); fix copy-paste typo in onAfterBuildQuery signature; add missing onAfterJoomlaUpdate, onBeforeWordPressUpdate, onAfterWordPressUpdate, onBeforeDispatch, onAfterDispatch events - Scheduled-Update-Summary.md, Scheduled-Action-Summary.md: tone down LLM/CRON warning - _Sidebar.md: add Connection Doctor entry Signed-off-by: Nicholas K. Dionysopoulos <nicholas@akeeba.com>