[TYPO3-v4] Automatically enabled install tool
Steffen Kamper
info at sk-typo3.de
Wed Aug 3 01:36:53 CEST 2011
Hi Helmut,
i see your points. The most week authorisation for install tool is the
saved hash in locallang. If it would change this from the point a
database is used it would protect a bit better.
If the auth process is too week, we could change it using the same way
like BE auth.
But may be we drift, your main pont was the file creation to allow any
auth for install tool.
btw - i have seem some sites using http-auth on the typo3/install
folder, might be an additional option.
vg Steffen
More information about the TYPO3-project-v4
mailing list