some ponderings on gsconfig.php:
1)
please keep the constants for SALT together:
/*****************************************************************************/
/** Below are constants that you can use to customize how GetSimple operates */
# Extra salt to secure your password with. Default is empty for backwards compatibility.
#define('GSLOGINSALT', 'your_unique_phrase');
# Turn off auto-generation of SALT and use a custom value. Used for cookies & upload security.
#define('GSUSECUSTOMSALT', 'your_new_salt_value_here');
now these settings are at two different positions, that makes it difficult
2)
# Turn off CSRF protection. Not reccomended
#define('GSNOCSRF', TRUE);
I would suggest a better text, as this Turnoff is highly recommended when you run into these problems where nobody has an explanation...
CSRF happens so often at my DEBIAN installations, and I will use this settings for sure
why not:
# Turn off CSRF protection. Use it in case you receive the error message "CSRF error detected..."
4)
# Set override CHMOD mode
#define('GSCHMOD', 0777);
please set to
#define('GSCHMOD', 0755);
if set is not enough for some really rare environments, users can set it to 0777, but sufficient
is 0755
5)
# Data saving method. Default is XML
#define('GSSTORAGE', 'xml');
this constant is not used anywhere, so take it off please
Cheers, Connie
|--
Die deutsche GetSimple-Webseite:
http://www.Get-Simple.de = the german Get-Simple-Website!
Das deutschsprachige GetSimple-(Unter-)Forum:
http://get-simple.info/forum/forum/16/german-deutsch/