Invision Community 4: SEO, prepare for v5 and dormant account notifications By Matt November 11, 2024
Mat Barrie Posted September 28, 2006 Posted September 28, 2006 I know that you need the /install/ file. You should be locked out of the ACP for the first time until you remove /index.php, like what vBulletin already does.Except that there's no real need to. The installer wont do anything while install.lock exists. And again, if someone is able to remove it, you have bigger things to worry about than them reinstalling your forum.
Guest Posted September 28, 2006 Posted September 28, 2006 vbulletin doesn't even allow you to access the admincp as long as the installer exists...
Management Matt Posted September 28, 2006 Management Posted September 28, 2006 As of IPB 2.2.0 you can safetly delete the entire /install directory as the majority of the XML files used in the ACP have been moved to a 'resources' folder.
UBERHOST.NET Posted September 28, 2006 Posted September 28, 2006 vbulletin doesn't even allow you to access the admincp as long as the installer exists...Must make an admin feel like a kid at Disneyland who's just driven a car on the Autopia ride, thinking he's really driven a car. :lol:
Cool Surfer Posted September 28, 2006 Posted September 28, 2006 You don't really need to remove the whole directory, just the index.php file. And even then, they'd need your password to do any damage.I just rename the install folder instead of deleting. As its not always easy to upload when one is trying somethingnew with installation of the forum. FuSoYa is right, it is a security related thing.Let it be old wine in new bottle :)Or just like SMF and phpbb2 forums, you cant login into admin cp untill u delete the install dir.But on second thoughts, if a hacker is trying something, he just had to try to login and if he gets thatstupid message to delete the install directory, he is all the more sure that the directory exists.So finally back to invisions point of view. lol
Recommended Posts
Archived
This topic is now archived and is closed to further replies.