Mantis 2.5 - is it necessary to delete the admin folder?

[DevK]

Hi all,

I've just installed Mantis 2.5.2 on Ubuntu Server 16.04 LTS. I deleted the admin folder, but it looks like I was reading the wrong version of instructions. Everything still seems to be working fine.

So, two questions:

1) Should the admin folder be deleted?

2) If not, what harm will be done by deleting it?

Apologies if the answer should be obvious.

Thanks,

DevK

[atrol]

The folder should be deleted, see https://www.mantisbt.org/docs/master/en ... postcommon

[DevK]

That's great - thanks.

Any idea why the warning on the initial login page was removed?

And sorry - I'm using 2.5.1. Typo.

DevK

[atrol]

Any idea why the warning on the initial login page was removed?

I am not aware it has been removed. Maybe there is a bug.
Maybe you have set

Code: Select all

$g_admin_checks = OFF;

in your config_inc.php?

[DevK]

In config_defaults_inc.php I have

Code: Select all

$g_admin_checks = ON;

The only thing I edited in that file was to disable email, since I don't need it initially:

Code: Select all

$g_enable_email_notification = OFF;

I've checked a couple of recent installation tutorials on Youtube and the first login screens only have the warning to disable the default admin account or change the password, but not to delete the folder. For example:

https://www.youtube.com/watch?v=FRDO1cUgvzA @ 2:24.

[atrol]

I checked the code and found that the message has been removed since version 1.3.0-beta.1
https://github.com/mantisbt/mantisbt/co ... f6fd4540ff

I discussed with other developers, as I was not sure if it might have been an intended change (e.g. suppress the message, so script kiddies are not able to find such installations by searching the web for the message)

We think it was not intended.
https://www.mantisbt.org/bugs/view.php?id=23179 has been opened to track the issue.