[sr-dev] Siremis not secure

[Elena-Ramona Modroiu]

Hello,

Iñaki Baz Castillo wrote:
> Hi, after installing Siremis any one can visit this URL:
>
>   http://SERVER_IP/siremis-0.9.3/siremis/metadata/Config.xml
>
> and see the database settings.
>   
you should make available to web only the siremis-web directory, see:
http://siremis.asipto.com/install/#Web%20Server

If everything is accessible, then you get in troubles. You can have the 
directories in different locations, you have to update app.inc in bin/ 
folder to match new locations.

Best regards,
Ramona