x00
MVPx00 MVP
Reactions
-
Re: Signing out
It is clear that logout transient key is not being used in that case, as it mainly protect logins and postbacks. Logout csrf is a lower impact, but could constitute "denial of client attack"… (View Post)1 -
Re: Buying roles with set end date instead of period
The licence I actually MIT (permissive), but look like I haven't included it. (View Post)1 -
Re: Update this plugin to a newer version ?
@unixfox I'm unable to take look at until mid July, it is especially untested with 2.1 (View Post)1 -
Re: How secure is the cookie handling? Is "Keep me signed in" safe?
Cookies are sandboxed, and it entirely up to the client when to expire them or not or to accept them in the first place. You can only send guidelines. Cookie stealing or session hijack generally does… (View Post)2 -
Re: please help my forum cpu usage
I would say apc over opcache. Although opcache is more modern. APC is tried and tested with vanilla. It wil help a little. You could try the file caching with vanilla, however this may not help your … (View Post)1
