Hi all
I have build a form using
http://phpformgen.sourceforge.net/ which is a pretty nice tool if your not good at forms (I am not). However, to get everything working the form relies on a config.inc.php file which it uses when it connects to the db and so on. I have put the config file along with the processor.php file in assets/snippets/form but is that safe enough?
The info in the config could - used in a malicious way - wipe around 25 subdomains and my own primary domain.
So I need help making sure that the config is safe. I tried getting to it from a browser and with a terminal using wget, but I wasn’t able to do so, so I guess that’s always something.
What steps do I need to take in order to make sure that the config file is just as safe as modx’s own?
the URL for the site that uses the form is
grenzjobber.secus.dk/
And the url to the config file is
grenzjobber.secus.dk/assets/snippets/form/config.db.php
I have removed all vital info from the config for the moment being.
Thanks for reading, larsb