[PR #195] [MERGED] Simply check if authdb is in the docroot. #198

New issue

Closed

opened 2026-02-28 01:21:23 +03:00 by kerem · 0 comments

kerem commented

2026-02-28 01:21:23 +03:00

Owner

📋 Pull Request Information

Original PR: https://github.com/tuxis-ie/nsedit/pull/195
Author: @tuxis-ie
Created: 12/23/2020
Status: ✅ Merged
Merged: 12/23/2020
Merged by: @tuxis-ie

Base: master ← Head: check-authdb-docroot

📝 Commits (1)

d414f23 Simply check if authdb is in the docroot. If so, just blocklogin with a nice message.

📊 Changes

1 file changed (+6 additions, -27 deletions)

View changed files

📝 index.php (+6 -27)

📄 Description

There has always been a lot of issues with this check. So it's way simpler now. Just check if it is in the docroot, if so, block the login. Might be that you need to change your config a bit because this doesn't take htaccess-controls into account, but this is much simpler.

The last update to this check told me to secure my install, even though the file is not downloadable, so that was broken too.

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/tuxis-ie/nsedit/pull/195 **Author:** [@tuxis-ie](https://github.com/tuxis-ie) **Created:** 12/23/2020 **Status:** ✅ Merged **Merged:** 12/23/2020 **Merged by:** [@tuxis-ie](https://github.com/tuxis-ie) **Base:** `master` ← **Head:** `check-authdb-docroot` --- ### 📝 Commits (1) - [`d414f23`](https://github.com/tuxis-ie/nsedit/commit/d414f239a84d2d05ea95f2cded189160f89a4f0a) Simply check if authdb is in the docroot. If so, just blocklogin with a nice message. ### 📊 Changes **1 file changed** (+6 additions, -27 deletions) <details> <summary>View changed files</summary> 📝 `index.php` (+6 -27) </details> ### 📄 Description There has always been a lot of issues with this check. So it's way simpler now. Just check if it is in the docroot, if so, block the login. Might be that you need to change your config a bit because this doesn't take htaccess-controls into account, but this is much simpler. The last update to this check told me to secure my install, even though the file is not downloadable, so that was broken too. --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>