Merge pull request #11 from scientist-softserv/i330-jan-security-scan…

…-fixes

i330-jan-security-scan-fixes

.gitignore

@@ -48,4 +48,5 @@
 omeka.sql
 
 .env.*
-*deploy.yaml
+*deploy.yaml
+.git/

.htaccess

@@ -11,7 +11,7 @@
 # Note: This should only be enabled for development or debugging. Keep this
 # line commented for production sites.
 #
- SetEnv APPLICATION_ENV development
+#  SetEnv APPLICATION_ENV production
 
 # ------------- #
 # Rewrite Rules #
@@ -73,4 +73,8 @@ Header set strict-transport-security: "max-age=31536000; includeSubDomains"
 <IfModule mod_php5.c>
     php_flag register_globals off
     php_flag magic_quotes_gpc off
-</IfModule>
+    php_value display_errors 0
+    php_value display_startup_errors 0
+    php_flag log_errors on
+    php_value error_log /var/log/apache2/error.log
+</IfModule>

Dockerfile

@@ -1,4 +1,4 @@
-FROM php:8.2.7-apache as web
+FROM php:8.2.15-apache as web
 
 RUN a2enmod rewrite
 RUN a2enmod headers

application/config/config.ini

@@ -77,6 +77,8 @@ debug.emailLogPriority = Zend_Log::ERR
 ; Logging ;
 ;;;;;;;;;;;
 
+errors.log = true
+errors.display = false
 ; log.errors
 ; Log errors and other information.
 ; default: false

bootstrap.php

@@ -8,7 +8,7 @@
  */
 
 // Define the current version of Omeka.
-define('OMEKA_VERSION', '3.1.1');
+define('OMEKA_VERSION', '3.1.2');
 
 // Define the application environment.
 if (!defined('APPLICATION_ENV')) {

chart/.gitignore

@@ -1,3 +1,4 @@
 server.pem
 server.key
-*values.yaml
+*values.yaml
+.git/

plugins/ExhibitBuilder/.gitignore

@@ -1 +1,2 @@
-.DS_Store
+.DS_Store
+.git/

themes/berlin/.gitignore

@@ -2,3 +2,4 @@
 .sass-cache/
 node_modules/
 package-lock.json
+.git/

themes/default/.gitignore

@@ -1,3 +1,4 @@
 .DS_Store
 .sass-cache
 node_modules/
+.git/

themes/seasons/.gitignore

@@ -1,4 +1,5 @@
 .DS_Store
 .sass-cache
 node_modules/
-package-lock.json
+package-lock.json
+.git/