Symfony security enhancement? - symfony developers

Message from discussion Symfony security enhancement?

Fabian Lange

More options Jan 23 2008, 2:28 pm

From: "Fabian Lange" <Fabian.La...@web.de>

Date: Wed, 23 Jan 2008 20:28:43 +0100

Local: Wed, Jan 23 2008 2:28 pm

Subject: Symfony security enhancement?

  Reply to author
  |
  Forward
  | Print
  | View thread
  | Show original
  | Report this message
  | Find messages by this author
  

Hi,
as I am still running across symfony pages that have their dev env in
production I want to bring this up to dev-list notice. Any thoughts of
integrating a combination of Ant's and my idea?
I really think that enabling _dev on production should be a conscious step.
.: Fabian

-----Original Message-----
Sent: Thursday, 17. January 2008 20:47
To: symfony-users@googlegroups.com
Subject: [symfony-users] Re: Listing your page as using symfony a security

issue?

On 1/17/08 2:34 PM, "Fabian Lange" <Fabian.La...@web.de> wrote:

> And what about building in more security by default?

> e.g. accepting just localhost connections by default in the _dev frontends
> (which have to be consciously be modified to enable remote logins?)

I think this is a great idea. Taking it a step further it would be if there
was a built in mechanism to allow access to the dev by ip as well easily
within the configuration. Its not a big hassle to code yourself but itd be
nice if all you had to do was flip a cute little yaml switch :-)

-ant

Reply to author Forward