[Macola]

Posted this in software, but it probably belongs here...

I'm trying Contribute 2 and I discovered that it stores all the server information in an XML file, within an "_mm" directory. This file can easily be viewed from a web browser (view source), if directory browsing is enabled, or if you know where to look and type in the URL. Although the admin password is encrypted, I have no idea what type of encryption is used, and Macromedia doesn't seem to address this issue in their support docs.

Has anyone found a good way around this?

[philzilla]

Originally posted by Macola:
Has anyone found a good way around this?

change the permissions to keep people out?

try chmod 740 _mm or maybe even chmod 700 _mm and see if Contribute can still work with the file.

i haven't tested this any further than seeing if i can use Safari to download said file from my own webserver, with those permission changes: denied. if you can report back, that would be cool, as we'll all know then.

[Macola]

I tried changing permissions on the file, but Contribute threw a fit. My solution, which isn't perfect but works, is to use an .htaccess file in each of the affected directories to restrict access (using the <Limit> directive).

I'm suprised how few users have mentioned this in the Contribute support forums. I guess most of them don't even realize there's an XML file out there!