eHo CMS Security

eHo CMS is an enterprise-grade content management platform built on Laravel with a strong focus on security. It implements a multi-layered approach to data and infrastructure protection.

Access Control (ACL)

The built-in role and permission management system (Access Control List) provides flexible configuration of who can do what within the system. Each user receives a set of permissions, and the administrator has full control over access levels.

CSRF Protection

All forms are protected with CSRF (Cross-Site Request Forgery) tokens. Laravel automatically generates and validates unique tokens for each session, preventing cross-site request forgery.

Audit Log

The audit-log module records all user actions in the system: creating, editing, and deleting content. This allows tracking changes and quickly detecting suspicious activity.

Request Monitoring

The request-log plugin records all incoming HTTP requests, including 4xx and 5xx errors. Administrators can analyze traffic and identify exploitation attempts.

IP Blocking

The IP Blocker module allows blocking access from specific IP addresses or entire subnets. This is an effective tool against bots, spammers, and malicious actors.

Bot Protection (Captcha & hCaptcha)

eHo CMS supports both Google reCAPTCHA and hCaptcha to protect forms from automated submissions. This reduces server load and prevents spam.

ModSecurity (WAF)

ModSecurity with OWASP CRS ruleset is integrated at the web server level — a web application firewall that blocks SQL injections, XSS attacks, attempts to access sensitive files (.env, .git), and other common threats.

Cookie Management

The Cookie Consent module ensures GDPR compliance by informing users about cookie usage and obtaining their consent.

Data Encryption

All sensitive data (passwords, sessions, API keys) is encrypted using the AES-256-CBC algorithm through Laravel's built-in Encryption mechanism.

Maintenance Mode

The Maintenance Mode plugin allows instantly putting the site into maintenance mode for security updates without exposing the system to risks.

Backup

The built-in Backup module creates backups of the database and files, ensuring quick recovery in case of a security incident.

Conclusion

eHo CMS combines multiple layers of protection: from access control and encryption to web application firewall and audit systems. This makes it a reliable choice for businesses that value the security of their data.