[TYPO3-core] RFC #14719: Automatically create ENABLE_INSTALL_TOOL file when 1-2-3 Install Tool is used

[Jeff Segars]

On 6/15/10 2:36 AM, Dmitry Dulepov wrote:
> Hi!
>
> Jeff Segars wrote:
>> Problem:
>> When a new user first installs TYPO3, they must create the
>> ENABLE_INSTALL_TOOL file before installation can continue. For a
>> friendlier first install, it would be nice to automatically create the
>> file and go directly to the 1-2-3 Install Tool
>
> This may cause security issues. The most obvious is when the site is in
> prepared but not yet installed. If it is left like this, anybody from the
> Internet will be able to access Install tool.
>
> I insist that it must be evaluated by the security team before it is committed.

No disagreement from me :)

There's certainly a fine line between an easier first install and 
maintaining security so I agree that the security team should be on 
board before anything is committed.