XF 2.0 Importers Separate as add-on

[Nirjonadda]

Do we need remove Importers files from XF2 old installation? We no need Importers or Importers Separate as add-on, So how to remove Importers files?

 

[Chris D]

You can remove them if you wish, but it makes no difference if you don't.

They are located in src/XF/Import/Importer and you can remove any file that doesn't start with the word "Abstract".

 

[Nirjonadda]

You can remove them if you wish, but it makes no difference if you don't.

They are located in src/XF/Import/Importer and you can remove any file that doesn't start with the word "Abstract".

So its safe remain this files and no need delete?

 

[Chris D]

Not sure why it would be unsafe Do it, don't do it, doesn't matter

 

[whynot]

Not sure why it would be unsafe

A non-existent file cannot be a security problem:

We recommend that all customers upgrade to the latest version of XF 1.5 or XF 2.0, but if you are unable to do this then you can simply delete the file which resides in the following location: js/videojs/video-js.swf.

 

[Chris D]

I’m so glad you pointed that out. Obviously I’m well aware. This is a different kettle of fish though. That file can’t be executed unless XF calls it, so I stand by my previous statement.

 

[ibnesayeed]

I actually liked the idea of splitting it out into an add-on. It is one of those things that some installations would never use and some use just once. After that those files are just sitting around and not doing anything. Having just the things needed shrinks the surface area of security attacks, lowers the chances of conflicts with other things in the system, and keeps the system minimal and tidy. If some day a security vulnerability is found in a largely unused file which is present in every installation, more installations will be at risk.