HTML Logo by World Wide Web Consortium (www.w3.org). Click to learn more about our commitment to accessibility and standards.

Moving forward with Composr

ocPortal has been relaunched as Composr CMS, which is now in beta. ocPortal 9 will be superseded by Composr 10.

Head over to compo.sr for our new site, and to our migration roadmap. Existing ocPortal member accounts have been mirrored.


filtered=1 in URL

Login / Search

 [ Join | More ]
 Add topic 
Posted
Rating:
#111141 (In Topic #22319)
TQ
Avatar

Honoured member

Just a quick yes/no answer needed, does ocP v9.x ever put filtered=1 in the URL ?

I'm getting a number of error related emails that almost coincide with a change I made on my site so I want to put a redirect/rewrite entry in my iirf file so that I can capture the IP etc. but don't want to shoot myself in the foot in the process. I'm assuming these are people testing for XSS vulnerabilities.

TQ
Back to the top
 
Posted
Rating:
#111143
Avatar

filtered=1 is what ocPortal puts in when it strips out keep_session=xxx from a pasted URL (or URL that may be repeated somewhere, e.g. in an error email); it does this to protect a user's session from accidentally being revealed.


Become a fan of ocPortal on Facebook or add me as a friend. Add me on on Twitter.
Was I helpful?
  • If not, please let us know how we can do better (please try and propose any bigger ideas in such a way that they are fundable and scalable).
  • If so, please let others know about ocPortal whenever you see the opportunity.
  • If my reply is too Vulcan or expressed too much in business-strategy terms, and not particularly personal, I apologise. As a company & project maintainer, time is very limited to me, so usually when I write a reply I try and make it generic advice to all readers. I'm also naturally a joined-up thinker, so I always express my thoughts in combined business and technical terms. I recognise not everyone likes that, don't let my Vulcan-thinking stop you enjoying ocPortal on fun personal projects.
  • If my response can inspire a community tutorial, that's a great way of giving back to the project as a user.
Back to the top
 
Posted
Rating:
#111144
TQ
Avatar

Honoured member

Thanks Chris,

So it looks like something I've made a mess of. I'll re visit my addition and see if I can work out where I've gone wrong.

Tnx

TQ
Back to the top
 
1 guests and 0 members have just viewed this: None
Control functions:

Quick reply   Contract

Your name:
Your message: