My original settings were /tmp for Drupal's temporary directory. On a shared server - it seems like anyone can download the temp file, decompress it, and find out your database config settings.

So, I changed my file system settings to make it relative to Drupal "tmp" not "/tmp".

But, backup is still placing the tar'ed files in /tmp.

Comments

dmuth’s picture

dmuth commented

Oops! That would definitely be a problem. Thanks for pointing that out.

I'm currently on the road, but will be returning home on Sunday, April 1st. Upon returning home, I will issue a fix for this.

-- Doug

dmuth’s picture

dmuth commented
Status: Active » Fixed

Okay, I wrote the fix and committed it to CVS.

-- Doug

Anonymous’s picture

(not verified) commented
Status: Fixed » Closed (fixed)