Skip to content
Snippets Groups Projects
  • Lukas Reschke's avatar
    c92a1384
    Preventing access to the config folder · c92a1384
    Lukas Reschke authored
    It isn't uncommon that admins create a backup file of the config (i.e. `config.php.bak`) before performing any changes. This would allow everybody to read the backup of the configuration file which contain several secret and critical values.
    
    I don't believe this is worth a backport or getting added to the installer. It's just a nice to have. People that create public readable backups of their configuration are the one to blame, not us :-)
    c92a1384
    History
    Preventing access to the config folder
    Lukas Reschke authored
    It isn't uncommon that admins create a backup file of the config (i.e. `config.php.bak`) before performing any changes. This would allow everybody to read the backup of the configuration file which contain several secret and critical values.
    
    I don't believe this is worth a backport or getting added to the installer. It's just a nice to have. People that create public readable backups of their configuration are the one to blame, not us :-)