security.htm — JetBackup – Backup, Restore & Migrate 3.1.22.3

backup / public / views / settings / security.htm

backup / public / views / settings Last commit date

automation.htm 10 months ago general.htm 4 months ago integrations.htm 1 year ago logging.htm 1 year ago maintenance.htm 1 year ago notifications.htm 1 year ago performance.htm 1 year ago restore.htm 1 year ago security.htm 4 days ago updates.htm 1 year ago

security.htm

125 lines

1	<div class="pd-20 settings">
2
3	<div class="form-group row">
4	<label for="MFA_ENABLED" class="col-sm-3 col-form-label jb-label">{{ lang.t('MFA Authentication') }}</label>
5	<div class="col-sm-9">
6	<div class="pd-3 switch-main">
7	<label class="switch">
8	<input id="MFA_ENABLED"
9	type="checkbox"
10	ng-model="saveData.MFA_ENABLED"
11	ng-true-value=1
12	ng-false-value=0>
13	<span class="slider round"></span>
14	<input type="hidden" name="MFA_ENABLED" ng-value="saveData.MFA_ENABLED">
15	</label>
16	<p class="pd-3">{{ lang.t('Enhance your account\'s security by activating Two-Factor Authentication, It\'s a simple way to prevent unauthorized access and safeguard your data against potential threats.') }}</p>
17	</div>
18	</div>
19	</div>
20
21	<div class="form-group row">
22	<label for="MFA_ALLOW_CLI" class="col-sm-3 col-form-label jb-label">{{ lang.t('Allow CLI Access When MFA is Enabled') }}</label>
23	<div class="col-sm-9">
24	<div class="pd-3 switch-main">
25	<label class="switch">
26	<input id="MFA_ALLOW_CLI"
27	type="checkbox"
28	ng-model="saveData.MFA_ALLOW_CLI"
29	ng-true-value=1
30	ng-false-value=0>
31	<span class="slider round"></span>
32	<input type="hidden" name="MFA_ALLOW_CLI" ng-value="saveData.MFA_ALLOW_CLI">
33	</label>
34	<p class="pd-3">
35	{{ lang.t('Enabling this will allow command-line operations even when Multi-Factor Authentication is enabled. This may pose a security risk, as it could permit disabling MFA through CLI without additional verification.') }}
36	</p>
37	</div>
38	</div>
39	</div>
40
41	<div class="form-group row">
42	<label for="ABILITIES_ENABLED" class="col-sm-3 col-form-label jb-label">{{ lang.t('WordPress Abilities API') }}</label>
43	<div class="col-sm-9">
44	<div class="pd-3 switch-main">
45	<label class="switch">
46	<input id="ABILITIES_ENABLED"
47	type="checkbox"
48	ng-model="saveData.ABILITIES_ENABLED"
49	ng-true-value=1
50	ng-false-value=0>
51	<span class="slider round"></span>
52	<input type="hidden" name="ABILITIES_ENABLED" ng-value="saveData.ABILITIES_ENABLED">
53	</label>
54	<p class="pd-3">
55	{{ lang.t('Expose a read-only set of JetBackup capabilities (list backups, jobs, destinations, schedules, queue items and status) through the WordPress Abilities API for use by automation and AI agents. Requires WordPress 6.9 or later. Access is always restricted to administrators (manage_options); when enabled, any administrator application password or connected automation/AI agent can read this backup information. Disabled by default.') }}
56	</p>
57	</div>
58	</div>
59	</div>
60
61	<div class="form-group row" ng-if="saveData.ABILITIES_ENABLED == 1">
62	<label for="MFA_ALLOW_ABILITIES" class="col-sm-3 col-form-label jb-label">{{ lang.t('Allow Abilities API Access When MFA is Enabled') }}</label>
63	<div class="col-sm-9">
64	<div class="pd-3 switch-main">
65	<label class="switch">
66	<input id="MFA_ALLOW_ABILITIES"
67	type="checkbox"
68	ng-model="saveData.MFA_ALLOW_ABILITIES"
69	ng-true-value=1
70	ng-false-value=0>
71	<span class="slider round"></span>
72	<input type="hidden" name="MFA_ALLOW_ABILITIES" ng-value="saveData.MFA_ALLOW_ABILITIES">
73	</label>
74	<p class="pd-3">
75	{{ lang.t('Enabling this will allow Abilities API requests even when Multi-Factor Authentication is enabled. Abilities API calls are non-interactive and cannot satisfy MFA, so leave this off unless you specifically rely on automation/AI access.') }}
76	</p>
77	</div>
78	</div>
79	</div>
80
81	<div class="form-group row">
82	<label for="datadir_location" class="col-sm-3 col-form-label jb-label">{{ lang.t('Alternate Data Directory') }}</label>
83	<div class="col-sm-9">
84	<div class="pd-3 jobs">
85	<input type="text"
86	ng-style="datadir_public ? {'border-color': 'red'} : {}"
87	ng-attr-placeholder="{{saveData.SECURITY_DATADIR_RECOMMENDED ? saveData.SECURITY_DATADIR_RECOMMENDED : ''}}"
88	id="datadir_location"
89	class="form-control"
90	name="ALTERNATE_DATA_FOLDER"
91	ng-model="saveData.ALTERNATE_DATA_FOLDER"
92	ng-init="isReadOnly = !!saveData.ALTERNATE_DATA_FOLDER && saveData.ALTERNATE_DATA_FOLDER.length > 0"
93	ng-readonly="isReadOnly">
94	<p class="pd-3">
95	{{ lang.t('Data Directory is used to store configuration and valuable data related to your backups.') }} <br />
96	<span ng-if="!saveData.SECURITY_DATADIR_SECURED" style="color: red;">
97	{{ lang.t('Placing JetBackup\'s data directory within the public WordPress directory exposes it to potential security threats.') }} <br />
98	{{ lang.t('For optimal safety, please assign \'data directory\' to a private, non-public location.') }} <br />
99	<span ng-if="saveData.SECURITY_DATADIR_RECOMMENDED">{{ lang.t('Recommended path:') }} {{saveData.SECURITY_DATADIR_RECOMMENDED}}</span>
100	</span>
101	</p>
102	</div>
103	</div>
104	</div>
105
106	<div class="form-group row">
107	<label for="DAILY_CHECKSUM_CHECK" class="col-sm-3 col-form-label jb-label">{{ lang.t('Daily WordPress Core Files Check') }}</label>
108	<div class="col-sm-9">
109	<div class="pd-3 switch-main">
110	<label class="switch">
111	<input id="DAILY_CHECKSUM_CHECK"
112	type="checkbox"
113	ng-model="saveData.DAILY_CHECKSUM_CHECK"
114	ng-true-value=1
115	ng-false-value=0>
116	<span class="slider round"></span>
117	<input type="hidden" name="DAILY_CHECKSUM_CHECK" ng-value="saveData.DAILY_CHECKSUM_CHECK">
118	</label>
119	<p class="pd-3">{{ lang.t('Automatically checks your WordPress core files daily against official checksums to detect unauthorized changes or security issues. You\'ll receive an email notification if any discrepancies are found. Keep your site secure with minimal effort.') }}</p>
120	</div>
121	</div>
122	</div>
123
124
125	</div>