?
avatar sshcli
sshcli
6 Jan 2018

Steps to reproduce the issue

Backend->menu->new item->metadata tab

Expected result

We need the option in the backend to hide/edit "meta name= generator"

Actual result

There is no option to hide/edit "meta name= generator"
Anyone can see my site was made using Joomla

System information (as much as possible)

PHP 7.1.12
Joomla 3.8.3
MySQL 5.6.38

Additional comments

avatar sshcli sshcli - open - 6 Jan 2018
avatar joomla-cms-bot joomla-cms-bot - change - 6 Jan 2018
Labels Added: ?
avatar joomla-cms-bot joomla-cms-bot - labeled - 6 Jan 2018
avatar franz-wohlkoenig franz-wohlkoenig - change - 6 Jan 2018
Category Feature Request Layout
avatar Bakual
Bakual - comment - 6 Jan 2018

There is no reason to hide the generator. Even if you don't show that tag, there are many other ways to detect that the site is built with Joomla. You can even detect the exact version of it without any issues.

avatar sshcli
sshcli - comment - 6 Jan 2018

I understand.
But the other methods you mention are more advanced than this.
Right now, to see the generator is a single step "View Source Code"

For personal pages, it is ok to have it visible, but for professional pages owned by big companies this could be a problem.

avatar sshcli
sshcli - comment - 6 Jan 2018

So, my suggestion is:
Let the user decide if show this tag or not

avatar Bakual
Bakual - comment - 6 Jan 2018

But the other method you mention are more advanced than this.

Very advanced. Like for example checking the file "administrator/manifests/files/joomla.xml" (gives you exact Joomla version). Or in case administrator is blocked check if media/jui/css/bootstrap.css (or any other Joomla file) exists and you know it is Joomla. It's really not hard.
Even the regular sourcecode gives away clues for Joomla (eg template and media directories)

For personal pages, it is ok to have it visible, but for professional pages owned by big companies this could be a problem.

I don't see the problem that companies could get when people can see they use Joomla.

avatar franz-wohlkoenig
franz-wohlkoenig - comment - 6 Jan 2018

Anyone can see my site was made using Joomla

You can see it without "Generator=".

avatar sshcli
sshcli - comment - 6 Jan 2018

Ok
if no PR will be created for this issue, please feel free to close it at any time.
Regards

avatar franz-wohlkoenig
franz-wohlkoenig - comment - 6 Jan 2018

@sshcli you can always create a Pull Request but theres no Guarantee its gonna be merged.

avatar brianteeman
brianteeman - comment - 6 Jan 2018

If you want to do it you just have to add this to your template

<?php $this->setGenerator(null); ?>

I am closing this as security through obscurity is no security at all

avatar brianteeman brianteeman - change - 6 Jan 2018
Status New Closed
Closed_Date 0000-00-00 00:00:00 2018-01-06 15:22:55
Closed_By brianteeman
avatar brianteeman brianteeman - close - 6 Jan 2018

Add a Comment

Login with GitHub to post a comment