Re: ImpressCMS - Security

Posted by david on 1306692556

On the subject of security - I think it would be a sensible idea to look at moving the cache and compile directories to trustpath.

I notice that xoopscube also had this approach as well - as per this very good ticket suggestion here:
http://sourceforge.net/tracker/index.php?func=detail&aid=3101119&group_id=159211&atid=943472

The point about using a prefix is a very valid one, as it is possible I think to share trustpath over several sites on the same host (indeed, this is a possible way of achieving multi-site perhaps)