From 8e5a0c81ef118c7d88e10fb7d793a36e9204aea8 Mon Sep 17 00:00:00 2001
From: Marc Alexander <admin@m-a-styles.de>
Date: Sun, 21 Apr 2019 22:22:35 +0200
Subject: [ticket/security/233] Make smtp_password and smtp_username dynamic

SECURITY-233
---
 phpBB/phpbb/install/helper/config.php | 2 ++
 1 file changed, 2 insertions(+)

(limited to 'phpBB/phpbb/install')

diff --git a/phpBB/phpbb/install/helper/config.php b/phpBB/phpbb/install/helper/config.php
index fad6749019..7eb0ae3b05 100644
--- a/phpBB/phpbb/install/helper/config.php
+++ b/phpBB/phpbb/install/helper/config.php
@@ -330,6 +330,8 @@ class config
 
 		fwrite($fp, $file_content);
 		fclose($fp);
+		// Enforce 0600 permission for install config
+		$this->filesystem->chmod([$this->install_config_file], 0600);
 	}
 
 	/**
-- 
cgit v1.2.1