Eric Stadtherr wrote:
Jim Pingle wrote:
I would still prefer it didn't exist at all on an existing install, as it shouldn't be necessary. :)
The fact that you're worried about an SVN update bringing back the installer directory implies that you're running your live web site from your Subversion working copy. I wouldn't recommend this, since it opens up access to all of our .svn directories on your web server. You could get creative with access rules and/or .htaccess files, but that's probably introducing more complexity than copying the real files from your working copy to your web root. The rsync script posted earlier is similar to the installer script that I use (which excludes the .svn directories and other files that I don't want the web server serving up).
The access part is easily solved with a rule in Apache's main config like so:
<DirectoryMatch "^/.*/.svn/"> Order deny,allow Deny from all
</DirectoryMatch>
Not too exotic or creative, and if done site-wide, ensures that nobody's .svn directories get exposed, even by accident.
RoundCube is still considered in "testing" for us, so end-users are still warned that there could be outages or breakage while we test settings or attempt bug fixes for other users. Once it moves into real "production use" we might use some other setup like you describe, where files get copied to the main "live" site and away from the testing setup.
The main reason I bring it up though is not just for me and my install, but because I have a feeling we'll be seeing the question a lot. It would be nice to have an official answer worked out, or at least some solid suggestions, to put in the FAQ.
Jim _______________________________________________ List info: http://lists.roundcube.net/dev/