At OmniChat, safeguarding your data is our top priority. This tutorial outlines the key security measures we implement to protect against unauthorized access, data breaches, and cyber threats.
Security is critical here at OmniChat. We work with security experts who perform periodic security audits. We continually implement the latest security technologies and stay up-to-date on the latest security threats. Find below some of the security measures that have been implemented in OmniChat.
IP ban #
OmniChat permits a maximum of 10 unsuccessful login attempts within an hour. In case the limit is exceeded by a user, admin, or agent, they will be unable to access their account or the admin area for a period of 1 hour. This blocking mechanism is based on the user’s IP address and serves to deter brute force attacks aimed at uncovering login credentials. If you encounter the “Too many login attempts. Please retry again in a few hours.” error, you have two options: either wait for a few hours or make changes to the OmniChat database by deleting the ip-ban row from the sb_settings table.
XSS injection protection #
To prevent XSS injection protection attacks, all sensitive user inputs undergo sanitization.
Cross-Site Request Forgery (CSRF) protection #
To prevent CSRF attacks, all requests are validated by checking the login cookie and the client-side login string.
Active sessions termination on user update #
Whenever the password or the details for an admin or agent is changed, all active sessions are automatically logged out when sensitive operations are executed or after 1 hour.
AES-256-bit encryption #
We use 256-bit AES encryption to encrypt sensitive data such as active session login data.
Password by filename protection #
OmniChat ensures that all uploads are renamed with a random alphanumeric string prepended to the original file name to prevent discovery of the URL and unauthorized download of the uploaded file. Kindly note that, for this feature to function properly, your server must prohibit directory listing.
If you have additional doubts, remember that you can always contact us.
