after install should I remove setup.php

smilem

Hi, after install I should I remove zp-core/setup.php

Documentation does not mention this, but it's a security risk.

acrylian

Setup does nothing if you are not logged in. Actually it helps us a lot of times if someone has problems as we can see the errors.

You of course can remove it but in case of an update or any manual change to the database (lost passwords and deletion) you have to remember to put it back.