Hi - after the security issue with one of the files in manager if people were running with register_globals_on - even though we are running a 0.9.2.2 - I had a thought.
Is there any reason not to add http authentication to /manager to keep people from calling misc files -
is there anything a user who doesn’t need to log into /manager anyway would need in /manager?
Thanks
Yehosef
