PROBLEM A critical vulnerability in GetSimple 3.3.15 ?

[datiswous]

Thanks, I just thought that this kind of info, including adviced permission settings would be nice in the wiki (docs).

I think Shawn should give someone permission to update the Wiki and also to remove
spam from the forum.

most if not all forum users can edit the wiki (maybe only after a certain amount of posts, otherwise the wiki would get a lot of spam). You can see many edits from me in there. There are already people removing spam on a regular basis.

[shawn_a]

That is exactly what this issue is about, the htaccess not working because overrides are disabled in apache, so users should make sure their files are protected

[shawn_a]

We could move auth information to php files and include them instead, but then writing them would be strange..

[Bigin]

What do you mean, "strange to write them"? - Entering the auth information manually, such as in a config file or writing it automatically via PHP?