Document test removal suggestion for production usage

Issue #12547 Signed-off-by: Michal Čihař <michal@cihar.com>
2016-09-16 11:38:13 +02:00 · 2016-09-16 11:38:13 +02:00 · bd9bbc4b4d
commit bd9bbc4b4d
parent b18426f887
1 changed files with 1 additions and 0 deletions
--- a/doc/setup.rst
+++ b/doc/setup.rst
@ -756,6 +756,7 @@ are always ways to make your installation more secure:

 * Serve phpMyAdmin on HTTPS only. Preferably, you should use HSTS as well, so that
  you're protected from protocol downgrade attacks.
+* Remove the ``test`` directory from phpMyAdmin, unless you are developing and need test suite.
 * Remove the ``setup`` directory from phpMyAdmin, you will probably not
  use it after the initial setup.
 * Properly choose an authentication method - :ref:`cookie`