X-Git-Url: https://git.immae.eu/?a=blobdiff_plain;f=doc%2FSecurity.html;h=cec2059002aaa8d65497cec7b75abc59819b4ea1;hb=fdf88d194874a533cf3a8de3d317d70018aa8a62;hp=1fbbabde06e9d043f4d388a6bac3f60c4526c8ff;hpb=992af0b9d77cb4fbac2c37ef8d5896042d67a2a3;p=github%2Fshaarli%2FShaarli.git diff --git a/doc/Security.html b/doc/Security.html index 1fbbabde..cec20590 100644 --- a/doc/Security.html +++ b/doc/Security.html @@ -4,45 +4,69 @@ - Shaarli - Security + Shaarli – Security - +
@@ -99,8 +125,8 @@ code > span.er { color: #ff0000; font-weight: bold; }
  • Links are stored as an associative array which is serialized, compressed (with deflate), base64-encoded and saved as a comment in a .php file.
  • Even if the server does not support .htaccess files, the data file will still not be readable by URL.

  • The database looks like this:

    -
    <?php /* zP1ZjxxJtiYIvvevEPJ2lDOaLrZv7o...
-...ka7gaco/Z+TFXM2i7BlfMf8qxpaSSYfKlvqv/x8= */ ?>
    • +
    <?php /* zP1ZjxxJtiYIvvevEPJ2lDOaLrZv7o...
+...ka7gaco/Z+TFXM2i7BlfMf8qxpaSSYfKlvqv/x8= */ ?>

  • Small hashes are used to make a link to an entry in Shaarli. They are unique. In fact, the date of the items (eg. 20110923_150523) is hashed with CRC32, then converted to base64 and some characters are replaced. They are always 6 characters longs and use only A-Z a-z 0-9 - _ and @.