In Piwik we focus a lot on security and aim to track and fix all potential code issues. But there are often other reasons that would let intruders in a system. It could be interesting to give a list of interesting resources or Must-have regarding securing a Piwik server.
I am thinking in particular tips such as:
We could create a new section in the page: http://piwik.org/security/
with a simple list of items to do to make the Piwik server very secure.
Any feedback please comment!
OK let's make this ticket a bullet point. I will then put it in a website page and link it from http://piwik.org/security/
Have you got any other suggestion Anthon?
The rest of my ideas will be implemented in code. ;)
I have updated the Piwik security page to make it more clear.
Create the new guide How to secure a Piwik server? and have put the few tips we had.
Have linked the page from the Optimize and secure section of the docs.
Any feedback please edit the page directly (vipsoft) or please put feedback here and I'll modify the page!