[TYPO3-core] FYI72: bug #9645: Memcached backend is not working properly

Dmitry Dulepov dmitry.dulepov at gmail.com
Fri Nov 28 18:56:51 CET 2008


Hi!

Martin Kutschker wrote:
> You could try and access memcache from the "outside". Have a look and
> see if you can find any TYPO3 content.
> 
> Or write some BE modules that displays caching information :)

This is not very easy with memcached to display everything but
certainly possible to show tag list and identifiers.

Now when I wrote it, I start thinking that it can have serious
security implications. Any PHP file will be able to access TYPO3
information in memcached. Not that it is dangerous right now but it
can be dangerous if an extension decides to keep sensitive data in
the cache (like OpenID cache, for example). Probably memcached
identifier prefix should include TYPO3 encryption key along with
PATH_site, which means we need v3 of the patch soon...

-- 
Dmitry Dulepov
TYPO3 translations support
My TYPO3 book: http://www.packtpub.com/typo3-extension-development/book
In the blog:
http://typo3bloke.net/post-details/typo3_43_cache_and_memcached_fix_ready/


More information about the TYPO3-team-core mailing list