Don't allow account backups by default.

diff --git a/lib/default.php b/lib/default.php
index 466bd26fffd8671a7aa01e8d66a0581e1f109ec2..2e681e34b10c53bf5853668aaf206e381d3e0263 100644 (file)
--- a/lib/default.php
+++ b/lib/default.php
@@ -128,7 +128,7 @@ $default =
         array('banned' => array(),
               'biolimit' => null,
               'changenick' => false,
-              'backup' => true,
+              'backup' => false,    // can cause DoS, so should be done via CLI
               'restore' => false,
               'delete' => false,
               'move' => true),