Is this non secure ?

Worker Joined: Mar 11, 2004 Posts: 209

Hi

I was creating my pages as modules instead using content but thought why not to put it them at root ?

instead using this

www.mysite.com/modules.php?name=My_Blue_Widgets

i wanna use below but dont have an idea if using this will have a security problems at my site ?

www.mysite.com/My-Blue-Widgets.php

if its non secure please tell me why

Thanks

Posted: Fri Jun 09, 2006 5:28 pm

its not secure...because it doesnt incude the modules.php file which calls on many files to filter the data between the database and nuke itself...so security is upto the script u install and nothing else...if u ever download my sentinel unblock tool...it includes the config.php instead of the mainfile...this is to prevent the mainfile from using sentinel to tell that u are banned...thus security is eliminated when i dont call on the mainfile.

The modules file calls on the mainfile and has some of its own security coding in it...so now u see why not putting it in the modules file makes it not secure...now if u have no inputs whatsoever or secure it in the script then ur fine i think...i cant be for sure though as my hacking abilities are limited..im learnin though