forum.coppermine-gallery.net
No Support => Feature requests => Topic started by: lookenround on November 09, 2004, 12:46:05 am
-
I'd like to make a suggestion that by the close body tag, where it references the CPG version number,
that the version number be an option to toggle on or off. Keeping the rest of the CPG credit info of course :)
Why? In the event there is a security patch pending, googling for Coppermine + "1.3.2" won't show potential targets so easily.
Is it a major issue, no, but something worth considering maybe?
Thanks
-
Well, since there aren't any security risks associated with Coppermine, I don't see the point. That's a comment tag, and isn't indexed by search engines. Doing a google search for Coppermine Photo Gallery 1.3.0 on my domain comes up with zero matches.
Sorry, don't think this will be changed.
-
It's in there for support purposes: when users post their url on this board, we can easily find out which version they use (and possibly recommend an upgrade), as most users don't care about version numbers, so they only post "the most recent version" when asked what version they use (even if they actually use cpg1.0).
We're going to leave it where it actually is, so it's an "opt-out" option for you - you can remove it if you have security concerns (although kegobeer is absolutely right: this is not a security issue imo, and there has been no security flaw known for standalone coppermine).
Joachim