7
Hi there!
Quote:
Create a folder somewhere and copy the files from /xoops_trust_path in that.
It's true, but not
"somewhere".
Basic idea of XOOPS_TRUST_PATH is described on this page:
http://xoops-tips.com/news-article.storyid-108.htm
"XOOPS_TRUST_PATH was introduced by GIJOE (based on minahito’s idea as GIJOE credited). The idea and/or concept of XOOPS_TRUST_PATH is to secure a XOOPS module by moving all of the module’s PHP files
out of web root or DOCUMENT_ROOT.
In doing so, modules could not be easily tempered by potential crackers, especially if the module has private files included under the document root."
[...]
"To use XOOPS_TRUST_PATH, you must edit mainfile.php to add a constant defining XOOPS_TRUST_PATH location.
The location
should be out of your document root to take advantage of the secure feature.
If your XOOPS web root is
/home/yourname/public_html
Then you should create a directory under /home/yourname, parallel to public_html (NOT UNDER it, otherwise it will defeat the whole security purpose of moving files out of the web root)."
Best regards,
wodnick
