We launched new forums in March 2019—join us there. In a hurry for help with your website? Get Help Now!
    • 16680
    • 73 Posts
    Hi all

    I have build a form using http://phpformgen.sourceforge.net/ which is a pretty nice tool if your not good at forms (I am not). However, to get everything working the form relies on a config.inc.php file which it uses when it connects to the db and so on. I have put the config file along with the processor.php file in assets/snippets/form but is that safe enough?
    The info in the config could - used in a malicious way - wipe around 25 subdomains and my own primary domain.
    So I need help making sure that the config is safe. I tried getting to it from a browser and with a terminal using wget, but I wasn’t able to do so, so I guess that’s always something.

    What steps do I need to take in order to make sure that the config file is just as safe as modx’s own?

    the URL for the site that uses the form is grenzjobber.secus.dk/

    And the url to the config file is grenzjobber.secus.dk/assets/snippets/form/config.db.php

    I have removed all vital info from the config for the moment being.

    Thanks for reading, larsb
      Signature on it's way
      • 15083
      • 697 Posts
      Set permissions on the config file so it can’t be read by evil hackers?
      That link you sent, while nice, generates about 6 million lines of javascript when you need about 6.