jegelstaff / formulize

Unified data management. One system to handle all data entry, collection, and reporting, across all your unique workflows. Simplify processes. Make people happy.
https://www.formulize.org
GNU General Public License v2.0
27 stars 14 forks source link

Add permission check for writing install.lock to the installer #490

Open arvinsingla opened 2 months ago

arvinsingla commented 2 months ago

If the installer cannot write the install.lock file at the end of the installation it will cause mayhem. Since it's generally considered unsafe practice to give write permissions to the entire webroot we could adopt one of the following options

  1. Always have an install.lock file in the webroot but alter it's contents. Checking for write access to this file can be added to the installer.
  2. Check for write access to the /install directory in the installer and then place the install.lock file in there instead.