You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: admin-guide/3.3/en/data-import-and-export.md
+2-2Lines changed: 2 additions & 2 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -154,10 +154,10 @@ If you are importing users into OJS, first create the XML import file. [See the
154
154
Here are some things to consider:
155
155
156
156
* Be sure to define the document type appropriately using `<!DOCTYPE ...>`.
157
-
* Your XML file should UTF8-encoded.
157
+
* Your XML file should be UTF8-encoded.
158
158
*`<firstname>`, `<lastname>` and `<email>` are mandatory.
159
159
* If you allow the system to generate passwords for the users you are uploading, you can optionally allow the system to email the users with their account credentials. This option can be found on the Users XML Plugin Page \("Send a notification email to each imported user containing the user's username and password."\).
160
-
* You can require the user change their password when they next log in by setting the password attribute "change" to "true": `<password must\_change="true">`myoldpassword`</password>`
160
+
* You can require the user changes their password when they next log in by setting the password attribute "change" to "true": `<password must\_change="true">`myoldpassword`</password>`
161
161
* The default password encryption is "plaintext" \(ie., none\). Encrypted assumes it was encrypted by `Validation::encryptCredentials()` and is using the same encryption algorithm used by the system.
162
162
* If the imported file contains any usernames or email addresses that already exist in the system, the user data for those users will not be imported and any new roles to be created will be assigned to the existing users.
Copy file name to clipboardExpand all lines: admin-guide/3.3/en/email.md
+3-5Lines changed: 3 additions & 5 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -4,7 +4,7 @@ version: 3.3
4
4
---
5
5
# Email
6
6
7
-
This chapter explains how emails are sent in OJS, OMP, and OCS; the configuration options that are available; and how to troubleshoot email issues.
7
+
This chapter explains how emails are sent in OJS, OMP, and OPS; the configuration options that are available; and how to troubleshoot email issues.
8
8
9
9
Mail in PKP software applications uses [the PHPMailer library](https://github.com/PHPMailer/PHPMailer). You can find out more about PHPMailer on [their wiki](https://github.com/PHPMailer/PHPMailer/wiki). Other code related to mail can be found in [the pkp-lib mail class](https://github.com/pkp/pkp-lib/tree/main/classes/mail).
10
10
@@ -70,7 +70,7 @@ By default, PHPMailer will send mail through PHP's built-in `mail()` facility.
70
70
71
71
On Windows, PHP needs to be configured to send email through a SMTP server \(running either on the same machine or on another machine\).
72
72
73
-
On other platforms such as Linux and Mac OS X, PHP will sent mail using the local sendmail client, so a local MTA such as Sendmail or Postfix must be running and configured to allow outgoing mail.
73
+
On other platforms such as Linux and Mac OS X, PHP will send mail using the local sendmail client, so a local MTA such as Sendmail or Postfix must be running and configured to allow outgoing mail.
74
74
75
75
See [https://www.php.net/manual/en/function.mail.php](https://www.php.net/manual/en/function.mail.php) for more details on configuring PHP's mail functionality.
76
76
@@ -96,9 +96,7 @@ Reloading templates will override any modifications that you may have made. To k
96
96
97
97
All PKP applications require that primary and technical contacts are configured under Setup for proper daily operations. This is required for every journal, press, or conference in the system.
98
98
99
-
- In OJS 2.x, this can be done under _Setup Step 1_.
100
-
- In OCS 2.x, this can be done under _Website Management Step 1_.
101
-
- In OJS/OMP 3.x, this can be done under _Settings > Journal > Contact_.
99
+
In OJS/OMP/OPS 3.x, this can be done under _Settings > Journal/Press/Server > Contact_.
Copy file name to clipboardExpand all lines: admin-guide/3.3/en/securing-your-system.md
+8-8Lines changed: 8 additions & 8 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -10,13 +10,13 @@ Please see [https://pkp.sfu.ca/ojs/README](https://pkp.sfu.ca/ojs/README), [http
10
10
11
11
In general, the `files_dir` should not be web accessible and should be placed outside of the main software install directory. The software application will manage access to private submission files based on user roles and permissions \(i.e. Editors will have access to all submission files, whereas authors will only be able to access their own submission files\).
12
12
13
-
In addition, to ensure security the `files_dir` folder should not be readable by other users on the server. Only the webserver should have the necessary read/write permissions so that OJS, OMP, or OCS can read existing files and add new files to the folder, e.g.
13
+
In addition, to ensure security the `files_dir` folder should not be readable by other users on the server. Only the webserver should have the necessary read/write permissions so that OJS, OMP, or OPS can read existing files and add new files to the folder, e.g.
14
14
15
15
`drwxrwx--- 6 ojs www 204B 11 Sep 2017 files/`
16
16
17
17
The exact details of file permissions will depend on how your web server runs PHP scripts (this is called the "server API" or "SAPI"). For example, if it uses `mod_php`, all PHP scripts will run as the `www-data` user or similar (this is inherently not 100% secure on a multi-user server). If it uses CGI, FastCGI, FPM, or a similar mechanism, it will likely run under your user account.
18
18
19
-
It is recommended that you install an SSL certificate for your OJS, OMP, or OCS install and ensure that your site always uses the HTTPS protocol to manage user registration, login, and to present content to readers. Once your SSL certificate has been installed and is confirmed to be working \(i.e. you can access your site via [https://myjournal.org](https://myjournal.org/)\) you can configure your site to always use HTTPS by using the following setting in `config.inc.php`:
19
+
It is recommended that you install an SSL certificate for your OJS, OMP, or OPS install and ensure that your site always uses the HTTPS protocol to manage user registration, login, and to present content to readers. Once your SSL certificate has been installed and is confirmed to be working \(i.e. you can access your site via [https://myjournal.org](https://myjournal.org/)\) you can configure your site to always use HTTPS by using the following setting in `config.inc.php`:
20
20
21
21
`; Force SSL connections site-wide
22
22
force_ssl = On`
@@ -37,16 +37,16 @@ salt = "sdlkjfhleiqwrfgbksdlkjgbelruywoeiyt7384gdqlywqvlwjf"`
37
37
38
38
A secure deployment of PKP software can be best achieved by using the following recommendations, which are described in docs/README in every download of the software:
39
39
40
-
* Dedicate a database to OJS, OMP, and OCS; use unique credentials to access it. Configure this database to perform automated backups on a regular basis. Perform a manual backup when upgrading or performing maintenance. If you do not have access to your database contact your system administrator and ensure that database backups are taking place for your OJS.
40
+
* Dedicate a database to OJS, OMP, and OPS; use unique credentials to access it. Configure this database to perform automated backups on a regular basis. Perform a manual backup when upgrading or performing maintenance. If you do not have access to your database contact your system administrator and ensure that database backups are taking place for your OJS.
41
41
* Configure the software (`config.inc.php`) to use SHA1 hashing rather than MD5.
42
42
* Enable captcha or recaptcha in your `config.inc.php` file, and test that they are working. This will prevent most spam user registrations.
43
43
* Configure the software (`config.inc.php`) to use `force_login_ssl` so that authenticated users communicate with the server via HTTPS. (You will also have to properly create and configure an SSL certificate to do this properly.)
44
-
* Install the software so that the files directory is NOT a subdirectory of the OJS, OMP, or OCS installation and cannot be accessed directly via the web server.
44
+
* Install the software so that the files directory is NOT a subdirectory of the OJS, OMP, or OPS installation and cannot be accessed directly via the web server.
45
45
* Restrict file permissions as much as possible.
46
46
* Deploy and test a proper backup mechanism. The backup mechanism should back up the database, the system files, and the file storage area (the `files_dir` parameter in `config.inc.php`). Ideally, you should make both on-site and off-site backups.
47
47
* Ensure that your web server environment is regularly updated, in particular with any and all security patches.
48
48
49
-
If these steps are followed, you will substantially reduce the risk of falling prey to common hacking techniques. If already running OJS, OMP, or OCS, we strongly urge you to review your existing configurations and ensure these steps have been followed.
49
+
If these steps are followed, you will substantially reduce the risk of falling prey to common hacking techniques. If already running OJS, OMP, or OPS, we strongly urge you to review your existing configurations and ensure these steps have been followed.
50
50
51
51
### Secure File Management
52
52
@@ -55,7 +55,7 @@ Authors, reviewers, and editors deal with submission files from people they don
55
55
* Make sure you have antivirus software installed, and that it is up to date
56
56
* Make sure your operating system and all software (especially Word and Excel) are kept up to date, ideally by turning on any auto-update features available to you
57
57
* Make sure you have a backup solution available for your work computers
58
-
* Practice good password management: don’t use the same username/password in OJS, OMP, or OCS as you would for any other online account, and don’t use an easy to guess password
58
+
* Practice good password management: don’t use the same username/password in OJS, OMP, or OPS as you would for any other online account, and don’t use an easy to guess password
59
59
* Treat everything that you get online with the knowledge that you received it from someone you don’t know, and act likewise. If a submission appears to be suspicious for any reason (strange email address, suspiciously generic title or abstract, etc.), treat the included files with an additional level of diligence.
60
60
61
61
## Encryption
@@ -76,7 +76,7 @@ Google announced in 2014 that https [would be treated as a ranking signal](https
76
76
77
77
### Getting a Certificate
78
78
79
-
A certificate enables a secure connection from the user's Web browser to the server hosting your site. Installing a certificate for your site can not be done within the OJS, OMP, or OCS software and will require technical expertise or assistance at the server level. When considering a software host, determining their level of certificate support is an important consideration.
79
+
A certificate enables a secure connection from the user's Web browser to the server hosting your site. Installing a certificate for your site can not be done within the OJS, OMP, or OPS software and will require technical expertise or assistance at the server level. When considering a software host, determining their level of certificate support is an important consideration.
80
80
81
81
A good start is asking your hosting service provider if they have an existing solution for supporting TLS or SSL certificates -- Your hosting provider may be able to create/issue an TLS or SSL certificate for you. If you do not have shell access to your installation this may be the only way to go about adding SSL/TLS protection for your site.
82
82
@@ -126,7 +126,7 @@ Don’t forget to test this setup by registering a test account and confirming t
126
126
127
127
### Enable Account Validation
128
128
129
-
OJS, OMP, and OCS can be configured so that an email account validation step must be completed for all new user accounts before they can log in and interact with the system. To do this, uncomment and configure the following lines in `config.inc.php`:
129
+
OJS, OMP, and OPS can be configured so that an email account validation step must be completed for all new user accounts before they can log in and interact with the system. To do this, uncomment and configure the following lines in `config.inc.php`:
130
130
131
131
```
132
132
; If enabled, email addresses must be validated before login is possible.
Copy file name to clipboardExpand all lines: admin-guide/3.3/en/single-signon.md
+1-3Lines changed: 1 addition & 3 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -4,7 +4,7 @@ version: 3.3
4
4
---
5
5
# User Authentication and Single Sign-on
6
6
7
-
For synchronizing user accounts across multiple applications, OJS and OCS support LDAP and Shibboleth, both of which have varying degrees of support in other applications including PhpBB, Drupal, WordPress, and other content management systems.
7
+
For synchronizing user accounts across multiple applications, OJS supports LDAP and Shibboleth, both of which have varying degrees of support in other applications including PhpBB, Drupal, WordPress, and other content management systems.
8
8
9
9
*LDAP* (the Lightweight Directory Access Protocol), while not as powerful as Shibboleth (e.g. LDAP does not support single sign-on, where logging into one service automatically logs into all others), is a common choice for centralizing authentication on a server. A popular LDAP implementation is [OpenLDAP](https://www.openldap.org/) an open source implementation of the protocol.
10
10
@@ -13,8 +13,6 @@ For synchronizing user accounts across multiple applications, OJS and OCS suppor
13
13
14
14
## Setting up Shibboleth
15
15
16
-
*Note*: Please note that Shibboleth support has not yet been ported to OCS.
17
-
18
16
Shibboleth is maintained by the [Internet2 Middleware Initiative](http://shibboleth.internet2.edu/), and as such their website provides a central location for downloads and documentation. Currently, they provide Shibboleth Service Provider 2.1 in binary form for all major operating systems, as well as providing source code. For further information on installing and setting up the Shibboleth Service Provider, please consult Internet2's support documentation.
19
17
20
18
Once Shibboleth is set up on your system, integration with your PKP application requires the use of the [Shibboleth plugin](https://github.com/pkp/shibboleth) from the Plugin Gallery. After enabling this plugin, visit the plugin's Settings page for instructions on configuration.
Copy file name to clipboardExpand all lines: admin-guide/3.4/en/data-import-and-export.md
+3-3Lines changed: 3 additions & 3 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -11,7 +11,7 @@ There are many ways to import and export data with OJS, OMP and OPS. To access t
11
11
12
12
## REST API
13
13
14
-
You can use the REST API to read and write some data in the application. See the [api documentation](https://docs.pkp.sfu.ca/dev/api).
14
+
You can use the REST API to read and write some data in the application. See the [API documentation](https://docs.pkp.sfu.ca/dev/api).
15
15
16
16
## Native XML
17
17
@@ -76,7 +76,7 @@ There are a few ways to import or export user accounts. User accounts control ac
76
76
77
77
### REST API
78
78
79
-
See the [api documentation](https://docs.pkp.sfu.ca/dev/api) to see what user data can be read or written with the REST API.
79
+
See the [API documentation](https://docs.pkp.sfu.ca/dev/api) to see what user data can be read or written with the REST API.
80
80
81
81
### CSV
82
82
@@ -129,7 +129,7 @@ Consider the following when creating your xml import file.
129
129
130
130
## Export to Services
131
131
132
-
Each application provides plugins to export published metadata to indexing services, such as Crossref, PubMed, DataCite, DOAJ, MEDRA and more. Some of these plugins deposit directly to the services. Others generate an export file according to the service's specifications.
132
+
Each application provides plugins to export published metadata to indexing services, such as Crossref, PubMed, DataCite, DOAJ, mEDRA and more. Some of these plugins deposit directly to the services. Others generate an export file according to the service's specifications.
133
133
134
134
Go to **Settings** > **Website** > **Plugins** to install and configure these plugins. Our [user documentation hub](/) provides guidance for working with many of them.
Copy file name to clipboardExpand all lines: admin-guide/3.4/en/deploy-email.md
+1-1Lines changed: 1 addition & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -20,7 +20,7 @@ Your hosting service should provide instructions on how to add the `TXT` record.
20
20
21
21
## DMARC
22
22
23
-
To comply with the the [DMARC](https://en.wikipedia.org/wiki/Sender_Policy_Framework) framework, the application must be configured with an envelope sender. The envelope sender is an email address that the server has permission to send as. For example, if the application is hosted at https://my-journals.com, the envelope sender should be an email address `@my-journals.com`.
23
+
To comply with the [DMARC](https://en.wikipedia.org/wiki/Sender_Policy_Framework) framework, the application must be configured with an envelope sender. The envelope sender is an email address that the server has permission to send as. For example, if the application is hosted at https://my-journals.com, the envelope sender should be an email address `@my-journals.com`.
24
24
25
25
When a user signs up to the application with the email address `[email protected]`, your email server does not have permission to send as `[email protected]`. The envelope sender acts as the "true" sender, and the email is sent "on behalf of" `[email protected]`.
Copy file name to clipboardExpand all lines: admin-guide/3.4/en/securing-your-system.md
+2-3Lines changed: 2 additions & 3 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -10,7 +10,7 @@ version: 3.4
10
10
> This section describes how to run a secure server. Before reading this section, make sure you have followed the [recommended configuration](./deploy) instructions to secure the application.
11
11
{:.warning}
12
12
13
-
It's important to run OJS, OMP and OPS on a secure server environment. In addition to the security settings in the [recommended configuration](./deploy) of the application, you must ensure the server is secure where the applicaiton is run.
13
+
It's important to run OJS, OMP and OPS on a secure server environment. In addition to the security settings in the [recommended configuration](./deploy) of the application, you must ensure the server is secure where the application is run.
14
14
15
15
This section makes a few recommendations for running secure servers. However, if you are unfamiliar with server administration, we strongly encourage you to use a professional hosting service or hire a professional system administrator.
16
16
@@ -44,7 +44,7 @@ The following section describes how to get a SSL certificate, enable it, and con
44
44
45
45
### Getting a Certificate
46
46
47
-
A certificate enables a secure connection from the user's Web browser to the server hosting your site. Installing a certificate for your site can not be done within the OJS, OMP, or OCS software and will require technical expertise or assistance at the server level. When considering a software host, determining their level of certificate support is an important consideration.
47
+
A certificate enables a secure connection from the user's Web browser to the server hosting your site. Installing a certificate for your site can not be done within the OJS, OMP, or OPS software and will require technical expertise or assistance at the server level. When considering a software host, determining their level of certificate support is an important consideration.
48
48
49
49
A good start is asking your hosting service provider if they have an existing solution for supporting TLS or SSL certificates -- Your hosting provider may be able to create/issue an TLS or SSL certificate for you. If you do not have shell access to your installation this may be the only way to go about adding SSL/TLS protection for your site.
50
50
@@ -72,4 +72,3 @@ Required step to generate a certificate if you are going to be purchasing a cert
72
72
When you purchase a certificate from a CA, you will typically purchase a certificate that lasts between 1 to 3 years. Certificates are set to expire and will need to be renewed resulting in a new expense at the time of renewal. Let’s Encrypt certificates expire every 90 days. The Let’s Encrypt software (certbot) can be configured to automatically renew certificates before they expire. Meaning once installed you should have minimal maintenance moving forward. Automation is done with `cron` or `systemd`.
0 commit comments