From: Jim C. <ji...@in...> - 2004-05-21 10:00:26
|
On May 14, 2004, at 3:53 PM, Jim Cheetham wrote: > By default, the 1.3.10 config.ini is placed within the public webspace > for the wiki. > > This means that it can be retrieved by anyone asking for > http://<wikiname>/config/config.ini Well, more accurately, if your Apache webserver's httpd.conf doesn't have AllowOverride AuthConfig Limit in a <Directory> element relevant to your wiki location, it can be retrieved by anyone. -jim |