Welcome to Geeklog, Anonymous Friday, June 09 2023 @ 04:46 am EDT

Comments for Don't forget to secure your installation

Don't forget to secure your installation | 8 comments | Create New Account

The following comments are owned by whomever posted them. This site is not responsible for what they say.

Well, here\'s an idea...

Authored by: Tony on Thursday, March 21 2002 @ 09:36 am EST

I think with the next release I will do this. After the installation is complete, I will set a flag in the vars table that denotes that the installation script is disabled. To re-run the installation script, you will need to update that flag via the DB first. I will modify the script to double check that flag before proceeding. If lib-database.php can\'t be found then I\'ll assume the database doesn\'t exist and let them proceed.

How\'s that sound?

-----
The reason people blame things on previous generations is that there\'s only one other choice.

---
The reason people blame things on previous generations is that there's only one other choice.

Well, here\'s an idea...

Authored by: efarmboy on Saturday, March 23 2002 @ 11:46 am EST

Tony,

This sounds like a good safety check to have and provides you with another control mechanism within your install program logic - should the script be run more then once.

I\'ve not tried running the install.php since I came up and don\'t want to try considering all is fine. I just modify the config.php file as required.

What controls are place now in install.php should you re-run it - and would you run it to modify config settings?

On another note: I have used a .htaccess file in my geeklog root directoty which contains \"IndexIgnore *\" This is working fine - except I noticed the \"Admin Home\" link in the template thtml files only specify the directory instead of the full path to admin/index.php. With IndexIgnore on, it can\'t list the directory. I have modified ALL my template files for each module to specify the full filename, but I don\'t like this as it means a lot of rework possibly on upgrades.

Can you consider specifying the full path/filename.

Thanks,
Blaine

Search

Resources

About

Getting started

Support

Development

Topics

User Functions

What's New

Articles last 4 weeks

Comments last 4 weeks

Pages last 4 weeks

Links last 4 weeks

Downloads last 4 weeks