4 ms·

Really? What is your favorite non-config-file-using web framework?

• alecco 16y ago
  Calm, I didn't mean no config file. But any file with sensitive information should be stored in a safe directory (not the root, for example) and with strict permissions. Also any sensitive data within that file should be protected if possible. This applies to any remotely accessed application, of course. Also, how does a process working with remote clients have full access to a sensible file like that? Aren't there ACL features or something like that that can block that access? (No sarcasm meant.)