About eZ Publish audit...

We check many important parts of eZ Publish and eZ Platform websites to ensure security, performance and usability. There are few example tasks which are being performed:

Security analysis. To avoid data leakage we check

• eZ Publish version upgrade and available security fixes recommendations
• access to modules which present too many system informations for anonymous users
• database queries which can be sensitive for sql injection
• partial server configuration to ensure that at least basic security like SSL encryption is provided

Performance analysis. To ensure page is loading quicky we check:

• number of queries on each page to check the server usage
• configuration of „ViewCache” and „TemplateCache” to ensure that cache is used as often as it's possible
• javascripts and stylesheets quality and loading method
• templates structure and variables definitions
• database queries performance
• fetching functions parameters and logic

Flexibility analysis. To ensure both backoffice and front-end user-friendly environment we check:

• operators used to display images and URLs to allow domain independent environment
• translations settings and usage to allow mulitlangual usage
• modifications of eZ Publish kernel and custom content attributes to allow future updates

Code quality. To ensure efficient and developer-friendly environment we check:

• PHP Standards Recommendations
• eZ Publish recommendations for structure of classes, modules, operators and handlers

What do we check (for example) ?