Is SimplePHPBlog a secure blogging engine?
- by authentictech
Has anyone used the blog engine SimplePHPBlog? It is a simple blog engine that uses only text files (no database).
My problem with it is that the content directory where the texts files are stored appears to require being world writeable/readable (i.e. permission 777) for it to work. This means anyone can access the text files with a browser! These text files include the blog/comment poster's IP and email address!
This is not secure or good practice, right?