jorgebooks / measureit

Automatically exported from code.google.com/p/measureit
0 stars 0 forks source link

isolate web files from install and script #5

Closed GoogleCodeExporter closed 9 years ago

GoogleCodeExporter commented 9 years ago
the scripts folder, python folder and specially the install folder should be 
isolated from the htdocs files.

right now, following the install steps, we leave the create database and other 
scripts open for the internet, if one installs measureit open to other than the 
localhost.

it should be better security policy to have the scripts and install folders in 
the root of the package and moving all the web files to a folder named htdocs, 
being this folder the one should copy to the /var/www

also, the install should recommend changing the mysql password and point what 
files to edit to do that.

Original issue reported on code.google.com by dmotale...@gmail.com on 23 Aug 2011 at 3:30

GoogleCodeExporter commented 9 years ago
Added delete instructions for the scripts and setup folder into the setup. Also 
added a fat notice to the faq where a security part explains how to change the 
mysql password and the ability to make changes in measureit.

Thank you

Original comment by lalelu...@gmail.com on 24 Dec 2011 at 11:05