[wikka-community] secutity questions concerning the use of /plugins dir
Mon Aug 31 13:14:52 GMT 2009
i have written roughly three dozens of minor php code modifications in
several actions, handlers and also wakka.class for running my wikka
based web site www.giesemann.net.
once started with 188.8.131.52 i did the update to 184.108.40.206 by sync'ing the
complete 220.127.116.11 directory tree line by line using the MELD difference
viewer. this way was safe to merge the complete new code with all my
modifications, but for the cost of 3 hours of work (as i remember, there
was a security issue with GET fixed in 18.104.22.168., striking nearly every
so, now i discuss with me, wheather i should furthermore continue to
"meld" the code bases, spending that time, or better migrate the
modified files to /plugins and update the rest ...
as far as i understand, latter would cause the modified active copies
in /plugins won't be maintained anymore. this, i suppose, could
potentially lead into serious security lacks in the future, and also it
would override bugfixes and enhancements.
which way do you think is the appropriate, merging or plugging?
regards from oldenburg,
More information about the community