[TYPO3-v4] Automatically enabled install tool

Steffen Kamper info at sk-typo3.de
Wed Aug 3 01:36:53 CEST 2011


Hi Helmut,

i see your points. The most week authorisation for install tool is the 
saved hash in locallang. If it would change this from the point a 
database is used it would protect a bit better.

If the auth process is too week, we could change it using the same way 
like BE auth.

But may be we drift, your main pont was the file creation to allow any 
auth for install tool.

btw - i have seem some sites using http-auth on the typo3/install 
folder, might be an additional option.

vg Steffen


More information about the TYPO3-project-v4 mailing list