Security update merged from 2.1.

[fa-stable.git] / install.html

diff --git a/install.html b/install.html
index 974bf8b29c38e89ed13c1f204bd1b421afd0fbb3..b92912bcde2066f45e1f8fefed3780a7763250bd 100644 (file)
--- a/install.html
+++ b/install.html
@@ -13,7 +13,7 @@ installed on the web server. </li>
 server - with <strong><em>innodb</em></strong>
 tables enabled (see notes below) </li>
 <li><strong><em>Adobe Acrobat Reader</em></strong>
-- for viewing the PDF reports before printing them out. </li>
+- or another PDF reader for viewing the PDF reports before printing them out. </li>
 </ul>
 <h2>Important Notes</h2>
 <ul>
@@ -27,6 +27,14 @@ system relies on. Classes are used extensively by this system. When
 sessions are required they are started by the system and this setting
 of <strong><em>session.auto_start</em></strong>
 can and should be set to 0. </li>
+<li>
+For security reasons both Register Globals and Magic Quotes php settings 
+should be set to Off. When FrontAccounting is used with www server running 
+php as Apache module, respective flags are set in .htaccess file. When your
+server uses CGI interface to PHP you should set 
+<strong><em>magic_quotes_gpc = 0</em></strong> and 
+<strong><em>register_globals = 0</em></strong> in php.ini file.
+</li>
 <li><strong><em>Innodb</em></strong>
 tables must be enabled in the MySQL server. These tables allow database
 transactions which are a critical component of the software. This is
@@ -55,7 +63,7 @@ the username and password for the database. You will need these
 informations during the wizard install. </li>
 <li>Enter <strong><em>your_url/account/install</em></strong>
 (or whatever directory you entered). This will run the install wizard,
-setup a drill company and populating with initial data. You can later
+setup a drill company and optional populating with initial demo data. You can later
 on create your own real company. It is a good idea to get familiar with
 the system before starting your own company.&nbsp; </li>
 <li>After successfully install, remove or rename your install
@@ -128,7 +136,7 @@ user ROOT. A user with appropriate privileges must be set up. </li>
 password for &#8220;dbuser&#8221;. You would have entered this when you created
 &#8220;dbuser&#8221;. </li>
 <li>&#8220;<strong>dbname</strong>&#8221; is the name of
-the database. The provided scripts use the name OpenAccounting. </li>
+the database. The provided scripts use the name - frontaccount. </li>
 <li>&#8220;<strong>tbpref</strong>&#8221; is the table
 prefix for
 the tables. If you only have access to one database, you must use table
@@ -145,7 +153,7 @@ on the server is <strong>writable</strong>. </li>
 directory where FrontAccounting is installed. </li>
 <li>Enter the user name:&nbsp; '<strong>admin</strong>'
 </li>
-<li>Enter the password: '<strong>password</strong>'
+<li>Enter the password: '<strong>password</strong>'. If you used the automatic installer, then use your own password.
 </li>
 <li>(NB : enter without quotation marks). </li>
 <li>