Comments on: Prosper202 Self-Hosted Apps: 10 Best Practices To Securing Your Prosper202 Installation

By: mukil

mukil — Tue, 02 Feb 2010 13:35:39 +0000

seems to be an essential and informative post for all Prosper202 users out there…

keep up your work, Wes!

By: LMAO

LMAO — Tue, 29 Dec 2009 11:07:40 +0000

Nice post man, check this one out.

if($_GET["XX"] != “XXX”)
{ header(‘Location: http://youporn.com‘); }

Then, always login using:
yourdomain/202-login.php?XX=XXX
where XX and XXX are whatever you please.

Yataaa!

By: Marlon

Marlon — Sat, 12 Sep 2009 02:48:36 +0000

Step 7 is really not going help you if you are doing Adwords. Google cannot parse javascript and the bot will not redirect. It is basically a blank page.

If you do a php redirect, as soon as the call for the header is made, the JS will not load. So, that option is out.

You may want to try and do a meta redirect but that has shortcomings – load times are slow and double screen flashing.

Lastly, as a final option, you can load some content into the body with the JS present and have the JS redirect. This way, you will be feeding decent content to google to preserve QS.

Any other thoughts?

By: Shaun

Shaun — Fri, 03 Apr 2009 13:11:33 +0000

You forgot to mention changing the name of 202-login.php to something completely random. (ie. 202-whateveruwant.php)

I know you said to block access, but if you do not have the skills to do this, at least rename the file.