IALPA

Ok thank you.

Ok well thanks for getting back to me. I'll take your advice and put the files back. I'm sure you've had discussions about this during your development over the years but it does just feel a bit strange letting absolutely anyone hit an install/upgrade URL. Everyone being able to see some details about the database/applications installed and their status seems unusual. At least the critical error disappears!

Hello, Just want to keep this very short. I've upgraded a VERY old v3 board a week or so ago. I'm showing my age by saying I distinctly remember in the old days being warned and instructed to REMOVE/DELETE the admin install and upgrade folders after your board was installed properly to avoid another avenue of attack or vunerability. My new 4.7 board is fine, the upgrade and conversion to utf-8 is done. In keeping with what I knew, I removed the following folders: /admin/upgrade /admin/install /admin/convertutf8 However now when I visit my control panel and have a look at the support area I have a critical issue! It's complaining that all the install files are gone! So - what's the official position? do we leave the install and upgrade files alone on the system? I'm not sure I'm happy with users being able to hit example.com/admin/install without any restrictions! Thank you. (Yes I'm old).🤣