[TYPO3-core] RFC: #11368:

Michael Stucki michael at typo3.org
Sun Jun 21 18:40:58 CEST 2009


This is an SVN patch request.

Type: Minor security enhancement

Bugtracker references:
http://bugs.typo3.org/view.php?id=11368

Branch: TYPO3_4-1, TYPO3_4-2, Trunk

Problem:
To enable access to the Install Tool, a file 
typo3conf/ENABLE_INSTALL_TOOL must be created.
In cases of an insecure Install Tool password, it would be helpful if 
that file is automatically removed if it is older than one hour. This 
assures that an admin has explicitely unlocked the Install Tool within 
the last hour.

Solution:
Remove the file if it is older than 1 hour.
Additionally, I have slightly adjusted the error message and changed the 
syntax from one huge line to smaller pieces.

- michael
-- 
Use a newsreader! Check out
http://typo3.org/community/mailing-lists/use-a-news-reader/
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: bug_11368.diff
Url: http://lists.netfielders.de/pipermail/typo3-team-core/attachments/20090621/4ce13bb5/attachment-0001.txt 


More information about the TYPO3-team-core mailing list