- install drupal modules/themes as root:daemon rather than www:www
(only the files/ directory needs to be writeable by 'www').
- don't install 'settings.php' world-readable since it contains the
DB password. Use 640, owner 'www' instead.
- bump all modules.
tested in production, including upgrade szenarios.
ok sthen@ and landry@, maintainer timeout.
This module adds a tab for sufficiently permissioned users. The tab shows
all revisions like standard Drupal but it also allows pretty viewing of
all added/changed/deleted words between revisions.