[TYPO3-mvc] Tx_Extbase_MVC_Controller_Argument StoragePage

Michael Feinbier mf at hdnet.de
Wed Jun 23 09:32:36 CEST 2010


Am 22.06.10 18:03, schrieb Franz Koch:
>
> but it's needed in Typo3 for multidomain setups, or am I wrong here? You
> need to limit the repository to a certain branch/tree of TYPO3 in cases
> where you have a USER_INT plugin without cHashes (or a search/filter
> form), otherwise hackers could insert random IDs and see content of a
> different website. So there has to be some rootNode - and in TYPO3 v4
> those are the pages (PIDs).
>

Well, yes of course it is needed in many cases. But there are many cases 
where this is not needed as well.
I don't want to completly remove the pid-storage behaviour. Just 
"optimize" it a litte bit.
Maybe it is an idea to switch it on and off (without editing 
extbase-source files)

Cheers

Micha


More information about the TYPO3-project-typo3v4mvc mailing list