Share

DocMgr

Tracker: Feature Requests

5 do not display version information - ID: 1711740
Last Update: Comment added ( nobody )

DocMGR displays its version as part of the <title> on the login page. In
case of an eventual security problem with the software, it's to easy for
scripts to determine whether or not this instance of DocMGR is affected.
Version numbers should be in the source code as PHP-comment, never in HTML
that is anonymously accessable, not as HTML-comment. It is acceptable to
show logged-in users a version number.


Andries Broekema ( andriesbroekema ) - 2007-05-03 08:53

5

Open

None

Nobody/Anonymous

None

None

Public


Comments ( 3 )




Date: 2007-05-12 01:52
Sender: nobody

Logged In: NO

If you feel you must remove the verisoning.....
This is customized by editing the config.php file and REMOVING the version
number from the display string.


Date: 2007-05-05 08:12
Sender: andriesbroekema


Right, config.php line 224 says:

define("SITE_TITLE","DocMGR ".APP_VERSION);

so any admin can easily change this, however the default download should
be:

define("SITE_TITLE","DocMGR");



Date: 2007-05-04 20:03
Sender: salvobaglieri


I've not the source code right now.. But I think you can edit the title by
editing the file config.php.


Log in to comment.

Attached File

No Files Currently Attached

Change

No changes have been made to this artifact.