I made my admin account, but I can still accept /setup which looks like it will allow any random user to make an admin account as well.

How do I fix this?

    • one_old_coder@piefed.social
      link
      fedilink
      English
      arrow-up
      9
      ·
      edit-2
      14 hours ago

      I don’t see any guide talking about that. I would try some kind of Htaccess to prevent people from using /setup.

      It feels like a bandaid, but on the other hand I have never seen a “server application” where URLs like /setup can selfdestruct after one use.