The module always backups to the same directory and easier to guess. It would be better if this directory name is configurable as additional security measure.

Comments

ronan’s picture

ronan commented
Status: Active » Fixed

This is possible in the 2.x branch. If you don't want to upgrade and are worried about people guessing the paths of your backups (which should be protected by .htaccess anyway) add a random string to the file names and make sure you're appending timestamps.

Status: Fixed » Closed (fixed)

Automatically closed -- issue fixed for 2 weeks with no activity.