Unprotected .git or .svn directories put your website at risk of information disclosure


Version control software is very popular among web developers. The most used tool might be Git. Unfortunately the repository directory, e.g. .git is often unprotected in production environments. These folders not only contain the source code of a website but also database credentials, API access keys or tokens for popular cloud services like Amazon AWS, salts and hashes. Even more problematic is private data contained in sql dumps or csv files.

Studies e.g. by Internetwache.org or Jamie Brown show that a reasonable amount of websites is affected by this problem. (more…)

1 Comment

Book “Modern Extension Development for TYPO3 CMS with Extbase & Fluid” available in English


A couple of days ago Patrick Lobacher announced the immediate availability of the book “Modern Extension Development for TYPO3 CMS with Extbase & Fluid” in English language. This book is not only the translated version of the German edition but also revised to take TYPO3 CMS 7 into account. The translation has been reviewed by two English native speakers and the new book has been published by Open Source Press.


1 Comment