2011-12-07, 18:05:16
some ponderings on gsconfig.php:
1)
please keep the constants for SALT together:
now these settings are at two different positions, that makes it difficult
2)
I would suggest a better text, as this Turnoff is highly recommended when you run into these problems where nobody has an explanation...
CSRF happens so often at my DEBIAN installations, and I will use this settings for sure
why not:
4)
please set to
if set is not enough for some really rare environments, users can set it to 0777, but sufficient
is 0755
5)
# Data saving method. Default is XML
#define('GSSTORAGE', 'xml');
this constant is not used anywhere, so take it off please
Cheers, Connie
1)
please keep the constants for SALT together:
Code:
/*****************************************************************************/
/** Below are constants that you can use to customize how GetSimple operates */
# Extra salt to secure your password with. Default is empty for backwards compatibility.
#define('GSLOGINSALT', 'your_unique_phrase');
# Turn off auto-generation of SALT and use a custom value. Used for cookies & upload security.
#define('GSUSECUSTOMSALT', 'your_new_salt_value_here');
now these settings are at two different positions, that makes it difficult
2)
Code:
# Turn off CSRF protection. Not reccomended
#define('GSNOCSRF', TRUE);
I would suggest a better text, as this Turnoff is highly recommended when you run into these problems where nobody has an explanation...
CSRF happens so often at my DEBIAN installations, and I will use this settings for sure
why not:
Code:
# Turn off CSRF protection. Use it in case you receive the error message "CSRF error detected..."
4)
Code:
# Set override CHMOD mode
#define('GSCHMOD', 0777);
please set to
Code:
#define('GSCHMOD', 0755);
if set is not enough for some really rare environments, users can set it to 0777, but sufficient
is 0755
5)
# Data saving method. Default is XML
#define('GSSTORAGE', 'xml');
this constant is not used anywhere, so take it off please
Cheers, Connie
|--
Das deutschsprachige GetSimple-(Unter-)Forum: http://get-simple.info/forums/forumdisplay.php?fid=18
Das deutschsprachige GetSimple-(Unter-)Forum: http://get-simple.info/forums/forumdisplay.php?fid=18