I use a custom installer script on my sites (I had to beg my hosting provider for SSH access), but curiosity led me to take the Fantastico installer script for a spin anyway and see what it could do.
I'm glad to say it went well. After entering some basic configuration info (site name/slogan, (sub)domain and path, and admin username/pass) I was presented with a fresh installation of Geeklog 1.3.9; unlike the normal geeklog install process, no 'Moderator' account was created, just the one admin account which I had provided the name and password for; the install directory had been removed, so the site was left in a pretty secure configuration.
That said, here's some issues I have with how it was installed:
- All files were installed in the 'web root' folder, in other words, all the files outside of 'public_html' were moved inside it. This means that by browsing to http://newgeeklogsite.com/system I could see a list of all the files inside it, and I could read all the non-php ones; I could also attempt to execute PHP scripts which weren't intended to stand alone, such as config.php and the Pear libraries. Although I didn't find any ways to cause real trouble, this is pretty bad and could help malicious users find ways to harm your site.
- No options were provided to help configure the 'emailgeeklogstories' cron job, even though my provider supports cron jobs.
- None of the optional image libraries were configured, even though my service provider has both NetPBM and ImageMagick installed.