Ticket #1 (closed defect: fixed)

Opened 3 years ago

Last modified 1 year ago

settings/install page always available

Reported by: anonymous Assigned to: tobi
Priority: highest Milestone:
Component: backend Version: 1.0
Severity: normal Keywords:
Cc:

Description

After installing/setting up a new typo blog, anyone in the world can naviagate to <host>/settings/install and see the params, passwords (in plain text), and the other settings.

I realize this is beta software, but does this strike anyone else as a bad idea? The number of typo blogs out there is growing by the day, I would expect this would be a high priority.

Change History

04/08/05 23:41:20 changed by Seth

  • status changed from new to closed.
  • resolution set to fixed.

Fixed in repository

05/31/05 22:25:16 changed by anonymous

  • priority changed from normal to highest.
  • status changed from closed to reopened.
  • resolution deleted.

[] 




 

 

 

 

  

    
    06/01/05 09:28:47 changed by scoop
  

   
    
    
  • status changed from reopened to closed.
    • 
    
    
  • resolution set to fixed.
    • 
    
   

  

No, there's no need to reopen this.