On Tue, 04 Mar 2008 17:04:53 -0500, Jim Pingle lists@pingle.org wrote:
Thomas Bruederli wrote:
Please let me know what you think of it and what's not working correctly. Thanks!
This may be partly my ignorance of svn commands showing, but is there any way to prevent the 'installer' folder from coming back every time you run "svn update"?
You could change ownership to root, group to www-data (apache), then chmod 700. svn update works and the folder is not visible nor accessible for the web server. IMO this is protection enough. After all, you trust the web server to protect your config file too.
For the rest of the discussion, roundcube could also add a login for the installer. Another great project, "gallery" (gallery.menalto.com), does this for their updater script (run after svn updates) and it works pretty well (of course, you can still just delete/move the folder..).
Sebastian
List info: http://lists.roundcube.net/dev/