Re: Security Risk - Need some opinions

2009-06-03 Thread DanielMedia
I've been doing some more research on this. First off, you should probably make sure that allow_url_fopen and allow_url_include are disabled in both the php.ini file and the http.conf file in apache. This will protect you from someone executing code that gets included via a url. In regard to the

Re: Security Risk - Need some opinions

2009-06-03 Thread Miles J
You should post a trac ticket of this anyways for the team to see. https://trac.cakephp.org/ --~--~-~--~~~---~--~~ You received this message because you are subscribed to the Google Groups CakePHP group. To post to this group, send email to

Re: Security Risk - Need some opinions

2009-06-03 Thread DanielMedia
False alarm on the Google ads. Turns out you can pretty much run any kind of ad you want on your site via the query string. For example my site is a web development blog but if I pass a querystring like this: http://code621.com/?cars=toyota Car related ads show up. I always thought it was more