[TYPO3-dev] admin -> BE -> Installtool: Drop the need for a password?
Popy
popy.dev at gmail.com
Tue Feb 23 11:14:17 CET 2010
2010/2/23 Steffen Gebert <steffen at steffen-gebert.de>
> More important would be to automatically create the ENABLE_INSTALL_TOOL
> file, if a logged in admin wants to access the Install Tool.
>
-1 : This file was the only thing preventing somebody who did steal an admin
account to get total access to the website. And we've already lost a bit of
this "security" since the "create ENABLE_INSTALL_TOOL" button appeared.
Popy
More information about the TYPO3-dev
mailing list