Michal Čihař wrote:
Hi all
I know we stopped shipping default config file because it leads to unability to change effectively defaults. However some kind of default config is useful when you want to configure manually for whatever reason. So what about shipping some minimal default config file (as /config.default.inc.php) only with commonly used settings? I'd suggest just one server section + blowfish secret. This would hopefully prevent users blindly copying libraries/config.defaults.php.
Comments?
--
that's what i supposed some weeks ago, someone said no "for security reasons". but together with auth type = cookie i can't see such danger.