[TYPO3-core] RFC #14191: Install tool lacks hint of how to create ENABLE_INSTALL_TOOL
Sebastian Gebhard
sebastiangebhard at hoch2.de
Tue May 11 08:44:05 CEST 2010
Am 08.05.10 17:52, schrieb Steffen Gebert:
> Solution:
> Give the user this hint and a direct link to the module, when he's
> logged in as BE admin user.
Why do you want to offer a link to the link? Can't we check for admin
privileges here and offer a direct link to create the file?
BTW: After all, I think the ENABLE_INSTALL_TOOL thing is pretty
outdated. When someone has admin access to a TYPO3 Backend, he's got
also access to the install tool. Creating the file takes attackers (and
regular users of course!) some additional seconds to access the install
tool. Useless legacy in my eyes.
More information about the TYPO3-team-core
mailing list