[TYPO3-v4] Automatically enabled install tool

Ernesto Baschny [cron IT] ernst at cron-it.de
Wed Aug 3 14:29:43 CEST 2011


Xavier Perseguers schrieb am 03.08.2011 13:39:
> Hi,
> 
>> there have been a lot of discussions about automatically enabling the
>> install tool and I regularly fought against it.
> 
> Personally I said once that even the "create ENABLE_INSTALL_TOOL file"
> button was not the best idea and I still think it's just something that
> should not be available...

I also agree that we need to make the Install Tool more secure again and
revert the change or even go for the new approach proposed by Kay (thanks!).

On the other hand, I think the "Install Tool" is way too abused with
functionality and is a mix of "One time activity" and "Site specific
configuration options":

As a TYPO3 Hoster I would love to be able to simply LOCK the install
tool and not enable it for any customer.

But then the customer needs to configure their "404 handling", a
developer wants to configure the displayErrors / devIPmask, the
customer's admin wants to configure the "sessionTimeout", and maybe
"lockSSL". So they need the "whole install tool".

If these above mentioned settings where to be done somewhere else, it
would be very rare that people need to really enter the "Install Tool".
Maybe splitting up the functionality into different modules would help
and keeping the "Install Tool" slim.

Cheers,
Ernesto


More information about the TYPO3-project-v4 mailing list