سلاممیشه راهنمایی بکنید که این پیام ها چی هستند و دقیقا باید چه کاری انجام بدم که امنیت سرورم تامین بشه؟


کد:
Check SSH PasswordAuthentication
For ultimate SSH security, you should consider disabling PasswordAuthentication and only allow access using PubkeyAuthentication

کد:
Check dovecot weak SSL/TLS Ciphers (ssl_cipher_list)
Cipher list []. Due to weaknesses in the SSLv2 cipher you should /etc/dovecot.conf and set ssl_cipher_list to explicitly exclude it. For example:
ssl_cipher_list = ALL:!ADH:RC4+RSA:+HIGH:+MEDIUM:-LOW:-SSLv2:-EXP

کد:
Check php for ini_set disabled
[/usr/local/bin/php]
You should consider adding ini_set to the disable_functions in the PHP configuration as this setting allows PHP scripts to override global security and performance settings for PHP scripts. Adding ini_set can break PHP scripts and commenting out any use of ini_set in such scripts is advised

ممنون میشم در این باره ها راهنمایی بکنید.