Support » Plugin: Simple Membership » log.txt is visible to anyone

  • I enabled the log to track down a payment issue. However, I noticed that the log is visible to anyone. I’ve added this to my httpd.conf

    <Files “log.txt”>
    Order Allow,Deny
    Deny from all
    </Files>

    But I think it would be better if the log was stored in a database, or somewhere not visible to anyone. Or at the very least, add this tip to the settings screen.

    Also I found I had to manually change the permissions on the log.txt so that the plugin could even modify it. That should also be suggested on the settings screen so people know to do that.

    -Phil

Viewing 3 replies - 1 through 3 (of 3 total)
Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘log.txt is visible to anyone’ is closed to new replies.