I don't think it's worth the effort. And it's likely a lot of effort necessary to successfully hide usage of Elgg sufficiently. And even if it's less apparent that Elgg is used, it would help as an attack would most likely not be directed against Elgg usage in the first place specifically but rather aim undirectedly against any possible framework installed. If the attack would be successful, it wouldn't matter if the framework in use would be camouflaged because the sucess of the attack would reveal it anyway.
And putting effort into hiding which framework is used would require constant work every time you update your site to take into account any changes in code of the new version. And you would want to use the latest version as soon as possible as they might fix some security issue that you are so afraid of.
All the methods starting with set (e.g. setIconFromElggFile() ) are undefined.
Got it to work somehow with:
$owner = get_entity($test->owner_guid);
if (!$owner || !($owner instanceof ElggUser) || !$owner->canEdit()) {
register_error(elgg_echo('icon:upload:fail'));
forward(REFERER);
}
$error = elgg_get_friendly_upload_error($_FILES['icon']['error']);
if ($error) {
register_error($error);
forward(REFERER);
}
if (!$test->saveIconFromUploadedFile('icon')) {
register_error(elgg_echo('icon:resize:fail'));
forward(REFERER);
}But I want to store the images in their own directory instead of .../icons/...
ElggEntity::getIcon() and allows plugins to provide an alternative ElggIcon object that points to a custom location of the icon on filestore. The handler must return an instance of ElggIcon or an exception will be thrown.info@elgg.org
Security issues should be reported to security@elgg.org!
©2014 the Elgg Foundation
Elgg is a registered trademark of Thematic Networks.
Cover image by Raül Utrera is used under Creative Commons license.
Icons by Flaticon and FontAwesome.