From 5409ade28c5f0acf99dbadd4d95e6f8efda5d395 Mon Sep 17 00:00:00 2001 From: ArthurHoaro Date: Thu, 14 Apr 2016 14:20:23 +0200 Subject: Update docs from Wiki --- doc/Security.html | 63 +++++++++++++++++++++++++++++++++++++++---------------- 1 file changed, 45 insertions(+), 18 deletions(-) (limited to 'doc/Security.html') diff --git a/doc/Security.html b/doc/Security.html index 914fa507..87a4ee4b 100644 --- a/doc/Security.html +++ b/doc/Security.html @@ -4,31 +4,49 @@ - Shaarli - Security + Shaarli – Security - +
@@ -39,18 +57,26 @@ code > span.er { color: #ff0000; font-weight: bold; }
  • Download
  • Server requirements
  • Server configuration
    • +
  • Server security
    • +
  • Shaarli installation
  • Shaarli configuration
    • +
  • Plugin installation & configuration
    • +
  • Docker
    • +
  • Plugin list
  • Usage
  • How To
    • @@ -62,6 +88,7 @@ code > span.er { color: #ff0000; font-weight: bold; }
  • Directory structure
  • 3rd party libraries
  • Plugin System
    • +
  • Release Shaarli
  • Security
  • Static analysis
  • Theming
    • @@ -101,8 +128,8 @@ code > span.er { color: #ff0000; font-weight: bold; }
  • Links are stored as an associative array which is serialized, compressed (with deflate), base64-encoded and saved as a comment in a .php file.
  • Even if the server does not support .htaccess files, the data file will still not be readable by URL.

  • The database looks like this:

    -
    <?php /* zP1ZjxxJtiYIvvevEPJ2lDOaLrZv7o...
-...ka7gaco/Z+TFXM2i7BlfMf8qxpaSSYfKlvqv/x8= */ ?>
    • +
    <?php /* zP1ZjxxJtiYIvvevEPJ2lDOaLrZv7o...
+...ka7gaco/Z+TFXM2i7BlfMf8qxpaSSYfKlvqv/x8= */ ?>

  • Small hashes are used to make a link to an entry in Shaarli. They are unique. In fact, the date of the items (eg. 20110923_150523) is hashed with CRC32, then converted to base64 and some characters are replaced. They are always 6 characters longs and use only A-Z a-z 0-9 - _ and @.

    • -- cgit v1.2.3