Opened 3 years ago

Closed 3 years ago

#1486787 closed Feature Patches (fixed)

installer recommends removing installer directory instead of disabling it.

Reported by: darkside Owned by:
Priority: 5 Milestone: 0.4-stable
Component: Installer Version: git-master
Severity: minor Keywords:
Cc:

Description

I recommend a minor wording change. Something like:

%% svn di
Index: test.php
===================================================================
--- test.php (revision 3742)
+++ test.php (working copy)
@@ -402,8 +402,7 @@

<p class="warning">


-After completing the installation and the final tests please <b>remove</b> the whole
-installer folder from the document root of the webserver.<br />
+After completing the installation and the final tests plese set enable_installer = false in main.inc.php<br />

<br />


These files may expose sensitive configuration data like server passwords and encryption keys

Change History (2)

comment:1 Changed 3 years ago by darkside

  • Component changed from Addressbook to Installer

Well, trac ate my newlines. I'm not able to attach a physical patch at the moment, but I hope you get the idea.

comment:2 Changed 3 years ago by alec

  • Milestone changed from later to 0.4-stable
  • Resolution set to fixed
  • Status changed from new to closed

Removing files is more secure, but I've added a note about enable_installer option. Fixed in [8062c042].

Note: See TracTickets for help on using tickets.