agreement.txt August 28, 2015, 01:50:29 am I have 2 ideas for this text file. Since this text file is accessible via a URL, it should be moved or removed.Look here, or here.It could also lead to a security problem.1. MoveInsert this text file in the respective language folder.2. RemoveRemove and store in the database. Since there are an ID for each language installed, it would be possible to retrieve from the database in various languages.
Re: agreement.txt Reply #1 – August 28, 2015, 09:35:01 pm I'd say move it (no queries for something that is loaded a billion times by bots), but I can't see how someone could edit it with proper CHMOD
Re: agreement.txt Reply #3 – August 29, 2015, 01:14:18 am Any language folder is (unless you add specific server-side restrictions) accessible directly by URL, so it's nothing different.It's a "txt" file, so unless you attached the php-handler to txt files as well, it should not run anything on the server, just show the text, so not really a security issue. That said, I never saw the point of having it outside the language directory, so I'd favour the moving of the file to the languages directory. nods
Re: agreement.txt Reply #4 – August 29, 2015, 02:04:04 am Flavio93Zena feels cool coz emanuele said the same thing he said
Re: agreement.txt Reply #5 – August 29, 2015, 06:28:15 am Flavio93Zena feels derived didn't understand anything of the topic
Re: agreement.txt Reply #6 – August 29, 2015, 11:02:11 am I put on github an issue https://github.com/elkarte/Elkarte/issues/2196, for point 1. Move in the respective language folder.
Modern, Free, Powerful