config.inc.jsp has mysql passwords and such, and it is visible to the world.
Should this file be moved under WEB-INF where the world does not have access??
Log in to post a comment.