Move app.ini to app.ini.php

Using a .php extension prevents webservers from accidentally serving the configuration file as plain text. This is important for people who do sloppy deployments where the contents of App/ are accessible from the webserver.
cakephp · Aug 31, 2013 · aed6247 · aed6247
1 parent e2d1f14
commit aed6247
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/App/Config/app.ini → App/Config/app.ini.php b/App/Config/app.ini → App/Config/app.ini.php
@@ -1,3 +1,4 @@
+;<?php exit(); ?>
 ;
 ; CakePHP Debug Level:
 ;

diff --git a/App/Config/bootstrap.php b/App/Config/bootstrap.php
@@ -9,7 +9,6 @@
  *
  * @copyright     Copyright (c) Cake Software Foundation, Inc. (http://cakefoundation.org)
  * @link          http://cakephp.org CakePHP(tm) Project
- * @package       app.Config
  * @since         CakePHP(tm) v 0.10.8.2117
  * @license       http://www.opensource.org/licenses/mit-license.php MIT License
  */
@@ -54,7 +53,7 @@
  */
 $reader = new IniReader();
 Configure::config('default', $reader);
-Configure::load('app');
+Configure::load('app.ini.php');
 
 /**
  * Configure an autoloader for the App namespace.