<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<br>
<div class="moz-cite-prefix">On 04-07-14 12:35, Vipul Jhamnani
wrote:<br>
</div>
<blockquote
cite="mid:CAKugKpRsre4+7L2kyuYd5jaZmQ=aP2C=ZQSX-dUwKNAVPrjxNw@mail.gmail.com"
type="cite">
<div dir="ltr">Dave,
<div><br>
</div>
<div>I didn't see that change log is available publicly. I wrote
a script few months back to find out Drupal version. (6.x or
7.x)</div>
<div><br>
</div>
<div>Yeah, Joel should immediately block the access. </div>
</div>
</blockquote>
<br>
No. Don't bother, put your efforts into real security.<br>
<br>
<a class="moz-txt-link-freetext" href="http://willy.boerland.com/myblog/fingerprinting_a_drupal_iste_what_version_is_that_site_running">http://willy.boerland.com/myblog/fingerprinting_a_drupal_iste_what_version_is_that_site_running</a><br>
<a class="moz-txt-link-freetext" href="http://sourceforge.net/projects/blindelephant/">http://sourceforge.net/projects/blindelephant/</a><br>
<a class="moz-txt-link-freetext" href="https://addons.mozilla.org/En-us/firefox/addon/wappalyzer/">https://addons.mozilla.org/En-us/firefox/addon/wappalyzer/</a><br>
<br>
<blockquote
cite="mid:CAKugKpRsre4+7L2kyuYd5jaZmQ=aP2C=ZQSX-dUwKNAVPrjxNw@mail.gmail.com"
type="cite">
<div dir="ltr">
<div>I guess currently no one is maintaining his site that's why
changelog is accessible.</div>
</div>
<div class="gmail_extra"><br>
<br>
<div class="gmail_quote">
On Fri, Jul 4, 2014 at 2:18 PM, Dave Hall <span dir="ltr"><<a
moz-do-not-send="true" href="mailto:me@davehall.com.au"
target="_blank">me@davehall.com.au</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0
.8ex;border-left:1px #ccc solid;padding-left:1ex">
<div style="word-wrap:break-word">
<div class="">On 4 Jul 2014, at 6:37 pm, Vipul Jhamnani
<<a moz-do-not-send="true"
href="mailto:vipul.jhamnani@ebizontek.com"
target="_blank">vipul.jhamnani@ebizontek.com</a>>
wrote:<br>
<div><br>
<blockquote type="cite">
<div dir="ltr">
<div>Just saw that your site <span
style="font-family:arial,sans-serif;font-size:13px"><a
moz-do-not-send="true"
href="http://www.planttreaty.org/"
target="_blank">www.planttreaty.org</a> is
using Durpal 6.31 and I'm glad to see it's
updated to latest D6 version. Don't ask how I
found out the Drupal version ;)</span></div>
<div><span
style="font-family:arial,sans-serif;font-size:13px"><br>
</span></div>
</div>
</blockquote>
<br>
</div>
</div>
<div>It was pretty easy to find that info. The change log
is publicly available at <a moz-do-not-send="true"
href="http://www.planttreaty.org/CHANGELOG.txt"
target="_blank">http://www.planttreaty.org/CHANGELOG.txt</a></div>
<div><br>
</div>
<div>Joel you should block access to that in your Apache
config/.htaccess file.</div>
<br>
</div>
<br>
_______________________________________________<br>
consulting mailing list<br>
<a moz-do-not-send="true"
href="mailto:consulting@drupal.org">consulting@drupal.org</a><br>
<a moz-do-not-send="true"
href="https://lists.drupal.org/mailman/listinfo/consulting"
target="_blank">https://lists.drupal.org/mailman/listinfo/consulting</a><br>
<br>
</blockquote>
</div>
<br>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
consulting mailing list
<a class="moz-txt-link-abbreviated" href="mailto:consulting@drupal.org">consulting@drupal.org</a>
<a class="moz-txt-link-freetext" href="https://lists.drupal.org/mailman/listinfo/consulting">https://lists.drupal.org/mailman/listinfo/consulting</a>
</pre>
</blockquote>
<br>
</body>
</html>