Issues an Open-Source Application - Open Journal Systems (OJS)

I have several issues related to an open-source application installed on our server. We are an educational institution that manages open-source educational applications, one of which is Open Journal Systems (OJS). We are using OJS version 2.

In the last 3 months, the application has frequently been hacked, with the website's appearance being replaced by an online gambling page. Do you have any suggestions on how I can address this issue using Sangfor NGAF? Previously, I had restricted access from outside the country, but the attackers still managed to use a local VPN.

I would appreciate your help

Hi, first of all, update your application to ensure you that all the related bugs and cve are closed. After that, i would consider to publish this application using not well known ports (for example, publish https access on a port above 50000 (mysite.org:50000) and let users access to this web ui specifing the port you choose) by restricting access on some countries for example.

Hi,

It looks like you have some vulnerabilities on you application where they can exploit to attack.
First I would only allow to pass the traffic from outside to the ports that your application have the services exposed and need to be accessed.
Then ti do some pen-tests to your application to find if there is some misconfiguration ou some CVE related with the application, so you can take actions on you applications.

Hope this can help you.