Is it feasible to relocate the settings file?
e.g. outside of document root, like the data folder is.
Would this increase protection?
@Roger, that seems to be the most viable solutions, various other sites were suggesting that method.
I assume there is no elgg specfic solutions.?
Hit the settings file directly. What shows up? Nothing. What are you trying to protect against?
info@elgg.org
Security issues should be reported to security@elgg.org!
©2014 the Elgg Foundation
Elgg is a registered trademark of Thematic Networks.
Cover image by Raül Utrera is used under Creative Commons license.
Icons by Flaticon and FontAwesome.