Anyone on Mac using local development copy of TB? Security question

[alwayspaws]

Is anyone on a Mac using a local development copy of TB 1.0.3?

Have you had to do anything, security-wise, to protect your Mac?

[Traumflug]

thirty bees makes no efforts to escape it's environment and MacOS comes with a built in Apache, so using this should be safe.

I'm just not sure how well it works, but trying will give answers. Undoing a 30bz installation is a simple as removing the folder and deleting the database.

[alwayspaws]

Hi, @Traumflug I was interested because I never used shell commands and the terminal mode to run software, so I'm unsure if there is a security risk for me. Thanks!

[DaoKakao]

Your testing environment is set to use the localhost/127.0.0.1 address. This means, if you did not published webserver's port on the real ip, you have everything ok.

From another hand, if your mac is connected to the internet directly (i mean, mac's network interface has real ip assigned), it could be an issue because of Apple's bonjour service - it likes to publish all possible things on the network. Again, if you'll disable bonjour, it could affect your zeroconf devices connected to mac.

[alwayspaws]

I have a dynamic IP address.

[alwayspaws]

Is this the "install" folder? install-dev and its associated folders.

Does my dev site have to be in the root folder or can I move it if it will provide a more secure environment?

[DaoKakao]

install-dev is installation folder when you grab th TB from github. You can rename it or even erAlso you can move whole 30Bees folder anywhere you want, but after that you'll have to edit your apache config so the site root in it math the new physical location

[Traumflug]

All my installations are in subfolders without adjusting Apache. Shop URL then isn't http://localhost/, but http://localhost/subfolder/, of course. For evaluation and development entirely sufficient.

[alwayspaws]

@DaoKakao I need further help with this then.

[alwayspaws]

I like the idea of the subfolders

[DaoKakao]

subfolders is ok, but as far as i remember, as TB, as PS writes the webpath in config, so if you have installed your shop in localhost/subfolder1 and then move it to subfolder2, you have to reflect this changes. Also permissions of those subfolders have to be set properly

[alwayspaws]

I'll leave it alone as long as my computer is secure.

[Traumflug]

if you have installed your shop in localhost/subfolder1 and then move it to subfolder2, you have to reflect this changes.

Yes, after moving/renaming a folder one has to adjust this in Backoffice -> Preferences -> SEO & URLs -> Set Shop URL -> Base URI.

Not needed for fresh installations. They'll work wherever one does this installation.

[Traumflug]

@alwayspaws

I’ll leave it alone

Right. By explaining why there's no reason for fear, we actually managed to establish such fear. Probably an unavoidable pattern of how humans work.

[alwayspaws]

@Traumflug My fear, which I should not say in public but will anyway, is being set so far back with experiments that I’ll never make sales.