PEAK XOOPS - Re: Fastest Cache Hack - TRUST_PATH Location

Top > Comments >Downloads comment >Re: Fastest Cache Hack - TRUST_PATH Location

Re: Fastest Cache Hack - TRUST_PATH Location

Target	Downloads
Subject	Fastest Cache Hack (Experimental version)
Summary	＝＝最速キャッシュハック (FCH) ＝＝●特長ページまるごと単位でキャッシュする高速化ハックです。ただし、使い方はそれなりに難しい上に、セッションについての危険性を理解していないと思わぬセキュリティホールの原因になりますので、決して初心者向きではありません...

List posts in the topic

Re: Fastest Cache Hack - TRUST_PATH Location

msg# 1.1

depth:: 1

Previous post - Next post | Parent - Children.1 | Posted on 2006/5/15 4:34 | Last modified

GIJOE

Posts: 4110

hi tl.

Quote:

What would be the security implications, if any, if XOOPS_TRUST_PATH = XOOPS_ROOT_PATH

In FCH, someone can see admin's cache by
XOOPS_URL/fullcache/(md5(uid))_(md5(requesturi))
Though I think it is not so severe problem...

At least, put .htaccess under fullcache/

Anyway, I will release modules using XOOPS_TRUST_PATH.

Votes:1 Average:10.00

Posts tree

Re: Fastest Cache Hack - TRUST_PATH Location (tl, 2006/5/15 1:34)
- Re: Fastest Cache Hack - TRUST_PATH Location (GIJOE, 2006/5/15 4:34)
  - Re: Fastest Cache Hack - TRUST_PATH Location (tl, 2006/5/15 4:59)
    - Re: Fastest Cache Hack (bygreen, 2006/6/26 21:05)
      - Re: Fastest Cache Hack (GIJOE, 2006/6/27 4:57)
        
        Re: Fastest Cache Hack (bygreen, 2006/6/27 7:49)

Lost Password?

Register now!