Thread Rating:
  • 1 Vote(s) - 3 Average
  • 1
  • 2
  • 3
  • 4
  • 5
image proxy for https
#9
(10-25-2016, 02:30 PM)Neeeeeeeeeel.- Wrote: A little old topic, but I still would like to replay here. Wouldn't a feature like this make the forums more susceptible to DDoS attacks? Plus it will increase the site traffic a lot because of all third-party content will go thought your server. Also, you can potentially use the wrapper as a "real-proxy" as you wish... wouldn't be risky?
Usually things like the mail proxy and resource proxy are located on a server separate from the one where the forum is being hosted, mainly to prevent disclosing the main server's IP address, which is also our recommendation.

Most common setups involve a HMAC value transmitted along with the requested URL, which allows to limit requests to those generated by the script (if you wanted to use the proxy externally, you'd have to e.g. preview a post to get the link including the HMAC since you're not able to generate it yourself if you don't know the secret key); an obvious protective measure would be to further limit the usage to requests with a referrer header indicating that the request came from the forum pages, and server administrators are free to configure it further using third party solutions to fit their needs.
devilshakerz.com/pgp (DF3A 34D9 A627 42E5 BC6A 6750 1F2F B8AA 28FF E1BC) ▪ keybase.io/devilshakerz
Reply


Messages In This Thread
image proxy for https - by andrewjs18 - 04-14-2016, 08:18 PM
RE: image proxy for https - by Euan T - 04-14-2016, 08:59 PM
RE: image proxy for https - by andrewjs18 - 04-15-2016, 12:03 AM
image proxy for https - by Euan T - 04-15-2016, 09:44 AM
RE: image proxy for https - by Donald_Duck - 04-15-2016, 10:12 AM
RE: image proxy for https - by request - 04-24-2016, 06:16 AM
RE: image proxy for https - by Euan T - 04-24-2016, 03:51 PM
RE: image proxy for https - by Neeeeeeeeeel.- - 10-25-2016, 02:30 PM
RE: image proxy for https - by Devilshakerz - 10-25-2016, 02:51 PM
RE: image proxy for https - by labrocca - 11-29-2016, 09:42 PM
RE: image proxy for https - by Euan T - 11-29-2016, 10:13 PM
RE: image proxy for https - by labrocca - 11-29-2016, 10:31 PM

Forum Jump:


Users browsing this thread: 1 Guest(s)