[TYPO3] no_cache and DOS attack

Bartosz Aninowski bart at rem-it-sonik.pl
Wed Aug 29 14:25:04 CEST 2007


> Modify your .htaccess. See if URL has "no_cache=[^&]*" and rewrite URl
> without it. You can invent your own secret "no_cache" and rewrite it to 
> normal "no_cache" too.
> Such attack will succeed only of page has lots of plugins with complex 
> processing (such as tt_news or forums).

Yes. That's why I am asking.

Hm but I forgot about print=1&no_cache=1 in TV
so if I need print template I am open for DOS attack




More information about the TYPO3-english mailing list