Re: [Phpwiki-talk] FootNotes, Tables, The end of PHP3, I'm still alive, etc...

[Steve W. <sw...@wc...>]

On Thu, 8 Feb 2001, Malcolm Ryan wrote:

> This could be done via the following (untested) change to admin.php:
> 
>    // set these to your preferences. For heaven's sake
>    // pick a good password!
>    $wikiadmin   = "malcolmr";
>    $adminkey = "BHZ";
>    $adminpasswd = "750c783e6ab0b503eaa86e310a5db73"; // Not the real value

Would this require the server to write to the file? That in itself is a
problem. We should probably move the login/passwd to a separate file, not
store it in config.php.

If we create our own passwd file via the server, it could be -rw-------
nobody nobody and that might be a minor gain in itself.

Good security is so hard.

~swain

...............................ooo0000ooo.................................
   Hear FM quality freeform radio through the Internet: http://wcsb.org/
                     home page: www.wcsb.org/~swain