From 08f24b00cb7dd2646ca410c7bb1f150253a85aad Mon Sep 17 00:00:00 2001 From: Brion Vibber Date: Tue, 25 Nov 2003 06:04:38 +0000 Subject: [PATCH] Disable debug log by default; the previous default was insecure --- includes/DefaultSettings.php | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/includes/DefaultSettings.php b/includes/DefaultSettings.php index 037a513119..14dc1d5315 100644 --- a/includes/DefaultSettings.php +++ b/includes/DefaultSettings.php @@ -75,7 +75,11 @@ $wgSiteSupportPage = ""; # Miscellaneous configuration settings # $wgReadOnlyFile = "{$wgUploadDirectory}/lock_yBgMBwiR"; -$wgDebugLogFile = "{$wgUploadDirectory}/log_dlJbnMZb"; + +# The debug log file should be not be publically accessible if it is +# used, as it may contain private data. +$wgDebugLogFile = ""; + $wgDebugComments = false; $wgReadOnly = false; $wgSqlLogFile = "{$wgUploadDirectory}/sqllog_mFhyRe6"; -- 2.20.1