[phpLogCon] install.php remove or not

[Peter Vrabec]

ok. thnx. for answers Andre :)

I'll do following:
* suggest users to rename config.php to something safe
* do not install install.php during package UPDATE
* restrict access to phplogcon, allowed only from localhost by default


On Thursday 15 May 2008 02:48:49 pm Andre Lorbach wrote:
> > -----Original Message-----
> > From: phplogcon-bounces at lists.adiscon.com [mailto:phplogcon-
> > bounces at lists.adiscon.com] On Behalf Of Peter Vrabec
> > Sent: Thursday, May 15, 2008 2:38 PM
> > To: phplogcon at lists.adiscon.com
> > Subject: Re: [phpLogCon] install.php remove or not
> >
> > Hi,
> >
> > On Thursday 15 May 2008 10:31:52 am Andre Lorbach wrote:
> > > Hi,
> > >
> > > these are good questions ;).
> > >
> > > The behavior is wanted, the install.php script needs to be
> > > removed/renamed after installation, otherwise it would be possible
>
> to
>
> > > overwrite the users config.php by running the installation again.
> >
> > I think we can control access via apache configuration. install.php
>
> allowed
>
> > only from localhost.
> >
> > > The
> > > user will be able to set options within phpLogCon at some point in
> > > future versions.
> >
> > What do you mean "set options"? Edit config file?
>
> Yes once we have a user management system implemented, which can be
> turned on and off optionally, the user will be able to configure all the
> options within phpLogCon user interface.
>
> > > When the package is updated, install.php should not be installed.
> >
> > This won't be problem.
> >
> > > If
> > > there is an update needed in future, phpLogCon will handle it with
>
> an
>
> > > update script.
> >
> > Could you explain it little more.
>
> There will be some kind of update.php which can only be access by
> authorized users (requires the user management system) which will detect
> and perform necessary updates. The details have not been worked out yet,
> but this is how is going to work.
>
> Best regards,
> Andre Lorbach
>
>
>
>
>
> _______________________________________________
> phpLogCon mailing list
> http://lists.adiscon.net/mailman/listinfo/phplogcon