This is a static dump of issues in the old "Flyspray" bugtracker for DokuWiki. Bugs and feature requests
are now tracked at the issue tracker at Github.
Open
This task was never closed in our old bug tracker.
Feel free to open a new task at Github if you feel this is still relevant.
FS#2917 Unable to protect conf/ folder
Security
2014-01-17Malamut
Now PHP must have write permissions to conf/ directory only for config plugin (and installer). Despite of config plugin always modifying only local.php and local.php.bak it can't work if PHP has write permissions only to this files. So after install there no way to protect conf/ directory and to save ability of editing configuration.
I think that config plugin must work even it has only write permissions to local.php (not to all conf/ folder). In this case it should display a warning like "I can't create backup", but allow to save configuration.
2014-02-15ChrisS
It should be possible to shift these files to conf/local/ directory by modifying the config cascade in preload.php.
[ Longer term, I'd like to separate all of the locally modifiable conf files into a separate directory, but that's just me ]