Maximilien Cuony [The_Glu] wrote:
> - - - Notice: Undefined index: _step in
> /var/www/webmail/tmp/trunk/roundcubemail/installer/rcube_install.php on
> line 39
These are just noticies so I think they are fine in there - notices
should be disabled anyways - if you code around undefined index notices
it will make your life much harder and your code even more unreadable.
> Shouldn't you disable the installer, or protect it when a configuration
> file already exist ? Because for the moment, I just have to go to
> /installer to get the configuration options of an Roundcube installation...
> Yes there are a warning, but...
Yeah, this should be done. And as you can't expect that you can write to
the install dir
-) offer the config script for downloading as well
-) only allow configuration if a file install.allow exists
-) warn the user on the login page that install.allow must be removed
if it still exists.
That way noone can access the install script and the admin has to
actively enable it and hopefully he also disables it to get rid of the
message on the login screen.
Best regards,
Michael
--
Michael Baierl
<http://mbaierl.com/>
_______________________________________________
List info: http://lists.roundcube.net/dev/
