déplacement de la base de données et explication dans le README pour sécuriser ce fichier

3 files changed, 11 insertions, 1 deletions

diff --git a/README.md b/README.md
index e0712add..a1c7920f 100755
--- a/README.md
+++ b/README.md
@@ -6,6 +6,16 @@ Abandon Pocket, Instapaper and other Readability service : adopt poche. It is th
 
 ...
 
+## Security
+
+You **have** to protect your db/poche.sqlite file. Modify the virtual host of your website to add this condition :
+```apache
+<Files ~ "\.sqlite$">
+    Order allow,deny
+    Deny from all
+</Files>
+```
+
 ## License
 Copyright © 2010-2013 Nicolas Lœuillet <nicolas@loeuillet.org>
 This work is free. You can redistribute it and/or modify it under the
diff --git a/poche.sqlite b/db/poche.sqlite
index 9ae63ec0..9ae63ec0 100755
--- a/poche.sqlite
+++ b/db/poche.sqlite
diff --git a/index.php b/index.php
index be1ebef9..a27f1993 100755
--- a/index.php
+++ b/index.php
@@ -25,7 +25,7 @@
 
 try
 {
-    $db_handle = new PDO('sqlite:poche.sqlite');
+    $db_handle = new PDO('sqlite:db/poche.sqlite');
     $db_handle->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
 }
 catch (Exception $e)