Google Web Accelerator & Olympus
Forum rules
Discussion of general topics related to the new release and its place in the world. Don't discuss new features, report bugs, ask for support, et cetera. Don't use this to spam for other boards or attack those boards!
Discussion of general topics related to the new release and its place in the world. Don't discuss new features, report bugs, ask for support, et cetera. Don't use this to spam for other boards or attack those boards!
Google Web Accelerator & Olympus
I've noticed Olympus has some new features over the 2.x version of phpBB. Do these features prevent the Google Web Accelerator bug (of users accessing pages only other users can see)? Has anyone tested?
-
- Registered User
- Posts: 448
- Joined: Mon Jul 21, 2003 7:18 pm
- Contact:
Re: Google Web Accelerator & Olympus
To my knowledge, there's absolutely nothing that can prevent this bug except for Google fixing it.expert01 wrote: I've noticed Olympus has some new features over the 2.x version of phpBB. Do these features prevent the Google Web Accelerator bug (of users accessing pages only other users can see)? Has anyone tested?
Edit: Let me give my reasoning for that, so that someone can correct me if I'm incorrect. The problem currently is that if GoogleWA finds a cached version of the "private" page on its servers (it's actually more complicated than this, as there are a couple of algorithms to determine whether this happens - these algorithms need major tweaking at the moment), then it simply doesn't even contact the server with phpBB, it just serves the user the page found in its cache. Therefore, short of not providing the private page to an authenticated user (and thusly passing it into the GoogleWA cache if the user is using it), there is nothing that phpBB could do to prevent it.
Re: Google Web Accelerator & Olympus
Does having the ?sid= change the pages so they're not cached?
- A_Jelly_Doughnut
- Registered User
- Posts: 1780
- Joined: Wed Jun 04, 2003 4:23 pm
Re: Google Web Accelerator & Olympus
Google does indeed cache Olympus's pages, even with the SID. I'm not sure that it is a big deal with phpBB, though, from what I've read on Accelerator. phpBB uses real confirm options, not javascript.
A_Jelly_Doughnut
Re: Google Web Accelerator & Olympus
I meant will it change so that when you go to an Olympus forum the ?sid= is different for you and you won't see stuff you're not supposed to.
-
- Registered User
- Posts: 11
- Joined: Tue Jul 20, 2004 8:05 pm
Re: Google Web Accelerator & Olympus
The porblem is Google could automaticly log you into the site as some one else, even an admin!
Re: Google Web Accelerator & Olympus
It won't log you in - You just mioght be able to view sections of it. You can't make any changes etc.nezermundy wrote: The porblem is Google could automaticly log you into the site as some one else, even an admin!
-
- Registered User
- Posts: 219
- Joined: Tue Jan 25, 2005 11:31 pm
Re: Google Web Accelerator & Olympus
I've heard of people being able to read other people's PMs with it.
Re: Google Web Accelerator & Olympus
Indeed, quite possible ... but you'll get nowhere if you try and POST anything via a cached page. At that stage it'll require you to reauthenticate as appropriate.
Re: Google Web Accelerator & Olympus
So wait, google can cache restricted sub-forums, can't you lock google out using permissions