[TYPO3-english] theoretical question security

typo3dev typo3 at mielec.info
Sat Jan 9 14:43:07 CET 2016


On 2016-01-09 12:46, Jigal van Hemert wrote:
> Is "A" your real name?

Andrew its my name, ill try update my sig, but i'm not a huge developer 
so i don't see to reason to build my profile

secondly if somebody will want track me this will be easy, and on the 
second hand i prefer if anonymity becouse g know everything anyway

if this is really problem i'll back to read only mode


> Read the security guide:
> https://docs.typo3.org/typo3cms/SecurityGuide/Index.html

this link i know, but IMHO human factors always increased security problems


> No,  security by obscurity is not a good choice. Files inside extensions
> are often used as publicly available assets (images/css/etc). So, if you
> modify the core to have extensions live in another directory a visitor
> to your site can easily detect that location.

god point, like i said "theoretical question", this was quick thought :)
but i still wonder what are the possibilities :-)


More information about the TYPO3-english mailing list