OJS : Without Edit, Review and Online Paper Submissions,

[ams.jour]

A suggestion for OJS : Without Edit, Review and Online Paper Submissions,

For a print journal, where all the process completed through mannual procedure for there print version. Now they want to start online which identical to print version.

The process of submissions of paper as hard copy, reviewing process and editing will be allready done for print version.
Now for online version one needs OJS for uploading the final issue and distribution through subscription.

If OJS either reduced the undesired part or make separate version for non-reviewing OJS version it may be more useful.

Also this will also provide
1. a protection (through online submissions) from hacker's and disk space.

2. Due this this modification the disk occupying size of OJS reduced so a user may also install at low capacity web disk or for multi-journal publication separate saperate OJS with new template for each journal.

Thanks.

-Jo Ams

[rke4me]

Recently one journal website was attcked by a hacker through OJS online submission of a paper. In view of this , suggestion is useful because majority of OJS users do not have security system like Yahoo.com/ GMAIL.com/MSN.COM.

[asmecher]

Hi rke4me,

We've been very careful with respect to security, though of course bugs will happen -- could you describe how the submission process was used to hack the server?

Regards,
Alec Smecher
Public Knowledge Project Team

[rke4me]

submitting the virus file. finaly server is shutdown due to this severe attack.

[asmecher]

Hi rke4me,

If a user uploads an infected file as a submission, it's never executed by OJS, so should not cause problems on the server. The only way it could be executed (as far as I'm aware), thus compromising the server, is if the files_dir storage directory (as configured in config.inc.php) is available directly via the web server, contrary to the "Recommended Configuration" notes in docs/README. Is this what happened? Can you provide any more detail on the compromise?

Regards,
Alec Smecher
Public Knowledge Project Team

[rke4me]

May be possible to insert a virus thogh graphics file.

I am not knowing too much about server mgt. However some colleagues are trying to revive the things.

Certainly I would like to share all the information to you, when I get.

Thanks .

-rke4me

[asmecher]

Hi rke4me,

We do have checks in place for this as well -- but please do send us as much detail as you can, as it becomes available.

Regards,
Alec Smecher
Public Knowledge Project Team