Skip to content

Commit

Permalink
feat/crowdin_update_en (#161)
Browse files Browse the repository at this point in the history
  • Loading branch information
mariuszkrzaczkowski authored Jul 4, 2024
1 parent 266e1fc commit 7b54be8
Show file tree
Hide file tree
Showing 68 changed files with 325 additions and 336 deletions.
Original file line number Diff line number Diff line change
@@ -1,22 +1,22 @@
---
title: Fałszywe pozytywne wyniki analizy YetiForce przez ModSecurity
keywords:
- serwer
- wymagania
- systemu
- server
- requirements
- system
- YetiForce
- ModSecurity
tags:
- serwer
- wymagania
- systemu
- server
- requirements
- system
- ModSecurity
description: Jakie występują problemy w działaniu systemu YetiForce z ModSecurity
description: What are the problems with the operation of the YetiForce system with ModSecurity
---

W domyślnej konfiguracji ModSecurity nie działa prawidłowo z systemem YetiForce, co skutkuje wykryciem fałszywie pozytywnych wyników, czyli znalezieniem podatności, które faktycznie nie istnieją.
In the default configuration, ModSecurity does not work properly with the YetiForce system, which results in the detection of false positive results, i.e., finding vulnerabilities that do not actually exist.

## Przykłady błędów
## Examples of errors

### KaTeX parse error: Can't use function '$' in math mode at position

Expand All @@ -43,18 +43,18 @@ KaTeX parse error: Got function '\newline' with no arguments as superscript at p
[Tue Oct 19 12:46:31.425742 2021] [:error] [pid 3665031] [client 10.0.1.2:53070] [client 10.0.1.2] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=5,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "yetiforce.example.com"] [uri "/index.php"] [unique_id "YW6iB-TmEYx0Wwg3C6b1hwAAAAk"]
```

## Adres nie zawiera ataku `Remote Command Execution: Unix Command Injection`
## Address doesn't contain the Remote Command Execution: Unix Command Injection attack\`

Parametr `historyUrl` zawiera adres URL: "index.php?module=Calendar&view=CalendarExtended&history=true&viewType=month&start=2021-09-27&end=2021-11-06&user=22&time=current&cvid=undefined&hiddenDays=0,6", a nie polecenie powłoki `Remote Command Execution: Unix Command Injection`.
The `historyUrl` parameter contains the following URL: "index.php?module=Calendar&view=CalendarExtended&history=true&viewType=month&start=2021-09-27&end=2021-11-06&user=22&time=current&cvid=undefined&hiddenDays=0,6", not the following shell command: `Remote Command Execution: Unix Command Injection`.

## Nie zalecamy aby skrypty PHP były w stanie wywoływać funkcje do powłoki systemu operacyjnego
## We do not recommend that PHP scripts be able to call functions to the OS shell

W [`Konfiguracja systemuLogiSerwer - konfiguracja`](/administrator-guides/logs/server-configuration/) można zweryfikować, czy zostały wyłączone niebezpieczne funkcje (między innymi do wykonywania poleceń powłoki systemu):
In [System settingsLogsServer - configuration](/administrator-guides/logs/server-configuration/) you can verify whether any dangerous functions have been enabled (including shell commands):

```ini
disable_functions = pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,shell_exec,exec,system,passthru,popen
```

Dlatego nie ma ryzyka, jeśli serwer jest poprawnie skonfigurowany.
Therefore, there is no risk, if your server is properly configured.

## Każde dane wejściowe są odpowiednio weryfikowane pod kątem dozwolonych wartości i znaków
## Each input is properly validated for allowed values and characters
Original file line number Diff line number Diff line change
Expand Up @@ -4,11 +4,11 @@ description: This article does not describe the configuration procedures, but hi
keywords:
- serwer
- database
- wydajnoϾ
- performance
- YetiForce
tags:
- database
- wydajnoϾ
- performance
hide_table_of_contents: true
preview: 2-database-performance.jpg
---
Expand All @@ -18,8 +18,11 @@ preview: 2-database-performance.jpg
A proper configuration of the database server is an important element within the system implementation process. This article does not describe the configuration procedures, but highlights a few crucial points in optimizing a server environment. These guidelines are not mandatory, they are suggestions that result from many years of experience within the IT environment:

1. Your friends are: vmstat / dstat, iostat, top, ps and any graphical history of values.

2. Define the bottleneck (read/write, memory, CPU, network). How? Refer to point 1.

3. Server optimization according to the process: problem analysis > consideration > change (only one change a time) > test > implement > begin the process again until you achieve satisfactory / optimal results.

4. Hardware

- Recommended to use RAID 10 (RAID 5 may not be sufficient).
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -2,26 +2,26 @@
title: YetiForce requirements
description: YetiForce webserver requirements
keywords:
- serwer
- server
- requirements
- system
- YetiForce
- LAMP
- LEMP
- environments
- environment
tags:
- server
- requirements
- system
- LAMP
- LEMP
- environments
- environment
preview: requirements.jpg
---

## Introduction

YetiForce CRM requires a proper web server configuration. It is a key element for the process of installation as well as for the system to be stable. Most professional web servers meet the requirements presented below. However, in case your server does not meet all the requirements, ask your administrator to adjust the configuration and send him a link to this article. If your administrator cannot change the configuration, it might be time to consider upgrading your server.
YetiForce CRM requires a proper web server configuration - it is a key element for the installation process to finish successfully as well as for the system to be stable. Incorrect server configuration is the most common cause of various problems present in YetiForce. Most professional web servers meet the requirements presented below. However, in case your server does not meet all the requirements, ask your administrator to adjust the configuration and send him a link to this article. If your administrator cannot change the configuration, it might be time to consider upgrading your server.

During the installation process, the system verifies the actual server configuration and shows the elements that are incorrect and require a change in parameters. Please note that the requirements presented below are not general and not for each installation, for more complex systems they should be verified and optimized individually.

Expand Down Expand Up @@ -159,7 +159,7 @@ catch_workers_output = yes
import FPM from '/static/files/fpm.mdx';

:::important
FPM configuration example:
Przykładowa konfiguracja FPM:

<details>
<summary>Latest stable version</summary>
Expand Down Expand Up @@ -224,7 +224,7 @@ The configuration should allow the uploaded files to have full read and write ac
### Issues with SELinux

:::warning
Permission issues occur frequently if SELinux is installed on the server and the enforcing mode is enabled. Note the parameters below:
Gdy na serwerze jest zainstalowany SELinux w trybie enforcing często występują problemy z uprawnieniami. Należy zwrócić uwagę na parametry konfiguracyjne:

- httpd_unified
- httpd_can_network_connect
Expand All @@ -250,7 +250,7 @@ sudo setsebool -P httpd_can_network_connect on

### Supported browsers

Users should always have the latest version of any browsers they use because only the most recent versions support the newest web technologies. Below is a list of browsers, starting from the one that is the most recommended for YetiForce (Google Chrome) to the least recommended.
Users should always have the latest version of any browsers they use because only the most recent versions support the newest web technologies. Poniżej umieściliśmy przeglądarki w kolejności w jakiej użytkownik powinien dokonywać wyboru. Oznacza to, że np. przeglądarka Safari jest gorszą przeglądarką dla aplikacji YetiForce niż jest Google Chrome.

1. Google Chrome, Microsoft Edge
2. Firefox
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -22,7 +22,7 @@ Before the installation, check if your server complies with the requirements: [Y

:::important

A person who is going to install the system should have at least basic knowledge of web servers, databases, and server permissions. 99% of installation issues come from people with insufficient experience attempting to install the system. If you are not sure whether you can manage on your own, you can ask somebody with adequate IT expertise. The entire installation process will take up to 30 minutes. Installation of YetiForce is similar to the installation of applications such as WordPress, Joomla, Drupal. Differences between particular tools are minor, so if you managed to install a CMS system, you will also be able to install YetiForce.
A person who is going to install the system should have at least basic knowledge of web servers, databases, and server permissions. 99% of installation issues come from people with insufficient experience attempting to install the system. If you are not sure whether you can manage on your own, you can ask somebody with adequate IT expertise. The entire installation process will take up to 30 minutes. Installation of YetiForce is similar to the installation of applications such as WordPress, Joomla, Drupal. Różnice pomiędzy poszczególnymi narzędziami są niewielkie. Differences between particular tools are minor, so if you managed to install a CMS system, you will also be able to install YetiForce.

:::

Expand All @@ -37,8 +37,8 @@ We recommend downloading the "complete" versions, for example `YetiForceCRM-7.0.
:::

- Unzip the file, with e.g [7-Zip](http://7-zip.org/).
- Copy the directory to the web server, using e.g. [WinSCP](https://winscp.net/).
- Start the installation wizard from the web level (where you copied the files) and follow the steps provided.
- Katalog z systemem CRM, który otrzymasz po rozpakowaniu pliku ZIP, skopiuj na serwer WWW, np. za pomocą programu [WinSCP](https://winscp.net/).
- Następnie postępuj zgodnie z kreatorem, którego wywołasz z poziomu WWW tam, gdzie skopiowałeś pliki YetiForce CRM.

You can also use the bash console

Expand All @@ -59,13 +59,13 @@ On the start screen there are options that allow you to select a language of the

## Step 2 - Read and accept the license

It's necessary to agree to the license terms in order to proceed with the installation process. The YetiForce License is very similar to the standard MIT license, it allows modification of the code and to leave information about the initial developer. We recommend reading the license.
W drugim kroku kreator wymaga zaakceptowania licencji. The YetiForce License is very similar to the standard MIT license, it allows modification of the code and to leave information about the initial developer. Przeczytaj w pełni informacje o licencji, ponieważ z perspektywy firmy, dla której wdrażasz oprogramowanie, zapisy i warunki licencji są istotne.

![step 2](install-2.png)

## Step 3 - Server configuration review

In the third step, you can find your current web server configuration compared to the requirements of YetiForce (what needs to be changed and to what values to set). It is necessary to remember that this configuration may change according to different requirements applied to the application and a deployment company should take it into consideration. For example, if you generate large reports that have a longer generating time than the maximum time set in the `max_execution_time` parameter, then it is necessary to set the parameters in such a way that the time of executing a script is always longer than the time for generating a report. Otherwise, reports may not be generated successfully.
In the third step, you can find your current web server configuration compared to the requirements of YetiForce (what needs to be changed and to what values to set). It is necessary to remember that this configuration may change according to different requirements applied to the application and a deployment company should take it into consideration. Firma wdrożeniowa powinna uwzględnić zmiany we własnym zakresie. For example, if you generate large reports that have a longer generating time than the maximum time set in the `max_execution_time` parameter, then it is necessary to set the parameters in such a way that the time of executing a script is always longer than the time for generating a report. Otherwise, reports may not be generated successfully.

Make sure your administrator is familiar with [web server requirements](/introduction/requirements/). If all required parameters are not met, and you attempt to proceed with the installation, the application will display a warning message.

Expand Down Expand Up @@ -97,7 +97,7 @@ In this case, it is necessary to go back and enter the correct access data. If e

## Step 8 - Enter registration information

Enter the data of the company that will use the system, the data will then be used to register the system.
Enter the data of the company that will use the system, the data will then be used to register the system. Copy the directory to the web server, using e.g.

According to the license, each system must be registered after the trial period of 14 days.

Expand Down Expand Up @@ -145,4 +145,4 @@ Pay attention to delete cookies for HTTP and HTTPS!!!

You can easily remove all browser cache, but how to do it for one domain only so as not to lose all data?

In the development tools, it is possible to view and delete the cache. Each browser may have removal options elsewhere. More details can be found in the article [How to clear browser cache?](/administrator-guides/faq/how-to-clear-browser-cache/)
In the development tools, it is possible to view and delete the cache. Opcje usuwania danych podręcznych znajdują się w różnych modułach konfiguracji przeglądarki, w zależności od rodzaju używanej przeglądarki. More details can be found in the article [How to clear browser cache?](/administrator-guides/faq/how-to-clear-browser-cache/)
Original file line number Diff line number Diff line change
Expand Up @@ -3,18 +3,18 @@ title: System migration or recovery
description: How to properly migrate or restore a backup copy of YetiForce
keywords:
- move
- migrate
- migration
- restore
- copy
- backup
- server
- YetiForce
tags:
- migration
- migrate
- backup
---

Migrating or restoring the system from backup takes place in a few steps. Please read the information below to avoid any errors and mistakes.
Migrating or restoring the system from backup takes place in a few steps. By mieć pewność, że wykonujesz ją poprawnie, zapoznaj się z artykułem poniżej.

## Video guide

Expand All @@ -23,17 +23,15 @@ import TabItem from '@theme/TabItem';
import ReactPlayer from 'react-player';

<Tabs groupId="AAnD_Npa0ZM">
<TabItem value="youtube-AAnD_Npa0ZM" label="🎬 YouTube">
<ReactPlayer
url="https://www.youtube.com/watch?v=AAnD_Npa0ZM"
width="100%"
height="500px"
controls={true}
/>
</TabItem>
<TabItem value="yetiforce-AAnD_Npa0ZM" label="🎥 YetiForce TV">
<ReactPlayer url="/video/system-migration.mp4" width="100%" height="500px" controls={true} />
</TabItem>
<TabItem value="youtube-AAnD_Npa0ZM" label="🎬 YouTube">
<ReactPlayer
url="https://www.youtube.com/watch?v=AAnD_Npa0ZM"
width="100%"
height="500px"
controls={true}
/></TabItem>
<TabItem value="yetiforce-AAnD_Npa0ZM" label="🎥 YetiForce TV">
<ReactPlayer url="/video/system-migration.mp4" width="100%" height="500px" controls={true} /></TabItem>
</Tabs>

## Upload files to the web root directory
Expand Down Expand Up @@ -64,7 +62,7 @@ tar -zcvf /var/www/html/`date +"%Y%m%d_%H%M"`.tar.gz /var/www/html/

## Upload the database

Upload the database using the CLI console (recommended) or a database client eg. DBeaver, Database Workbench , SQLyog
Upload the database using the CLI console (recommended) or a database client eg.

```sql
mysql -P 3306 -h 127.0.0.1 -u yetiforce -p yetiforce < dump.sql
Expand Down Expand Up @@ -171,7 +169,7 @@ Migrating to a new server or restoring it from a backup requires [re-registratio

## Update addons

Some addons may need to be reconfigured when changing the location or address of the system, eg. [`System settings → Integration → Mail integration panel`](/administrator-guides/integration/mail-integration-panel/outlook).
[`System settings → Integration → Mail integration panel`](/administrator-guides/integration/mail-integration-panel/outlook).

### YetiForce Outlook Integration Panel

Expand All @@ -185,7 +183,7 @@ If you create a test environment, it is worth introducing some important changes

### Change user passowrds

### Add visuals
### Wizualne odróżnienie środowisk

Display a test environment notice on the login page and on the top bar of the system.

Expand Down
Original file line number Diff line number Diff line change
@@ -1,9 +1,9 @@
---
title: Test versions
title: test version
description: YetiForce and YetiForce Portal public test versions
tags:
- demo
- test version
- Test versions
keywords:
- demo
- test version
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -57,14 +57,12 @@ import V_11 from '/static/files/changelog/1.1.mdx';
<V_70 />
</details>


## [YetiForce 6.5](https://github.com/YetiForceCompany/UpdatePackages/blob/developer/YetiForce%20CRM%206.x.x/6.4.0_to_6.5.0/Changelog.txt)

<details>
<summary>Changelog 6.4 > 6.5</summary>
<V_65 />


</details>

## [YetiForce 6.4](https://github.com/YetiForceCompany/UpdatePackages/blob/developer/YetiForce%20CRM%206.x.x/6.3.0_to_6.4.0/Changelog.txt)
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -11,7 +11,6 @@ tags:
- YetiForce
- Open Source
- CLA

description: Poznaj licencję YetiForce oraz jak wygląda open source według YetiForce
---

Expand Down
Loading

0 comments on commit 7b54be8

Please sign in to comment.