bb-config.php and security
I have buddypress’s bbpress installed, and I want to configure the bbpress installation so that I can do bbpress administration (like moving topics from forum to forum).
I have searched around, and I see that I can do this simply by copying the bb-config.php file in my root folder to the location of my bbpress folder.
However, I have seen warnings that this could cause a security hole in my installation.
Can anyone be clearer about the nature of the security hole? As far as I can see, anyone wishing to administer the forums will still need to be logged in as Admin.
You must be logged in to reply to this topic.