大伙儿来谈谈PHP模版缓存和数据安全
大家来谈谈PHP模版缓存和数据安全
如题,谈谈,PHP模版缓存页面存储在机器里,那不是就是将用户数据暴露在了机器中,如果使用虚拟主机,那么是否我就可以跨站直接读取你的缓存页面,进而掌握了你缓存的敏感信息呢???
或者是我对模版引擎还不太了解吧,有没有什么办法能够做到即缓存了用户数据,又不那么容易被读取???
大部分模版引擎的缓存机制是怎么样的呢???
欢迎大家踊跃发言!!
刚刚接触模版引擎,说的不对请别见怪哈!
------解决方案--------------------
open_basedir限定目录
不过放在虚拟机上,那数据本来就是暴露给服务器管理者的
------解决方案--------------------
安全永远都是相对的
当你将数据以任何形式存放于互联网的某个节点中的那一刻开始,你的数据就处在“不安全”的状态中了
所以也大可不必杞人忧天
模板引擎的缓存是为了下次访问时的速度快一点
这与安全无直接联系
------解决方案--------------------
既然你的网站是有敏感数据的,那你就自己架设服务器啊,东西给自己管理啊,不然你永远都是不安全的。
------解决方案--------------------
楼主想问的是用户数据被缓存了么
这问题其实最终的解决方案就是别缓存用户数据
------解决方案--------------------
现在很多面试都有问到什么是php缓存机制;有没有做过之类的。
我感觉除了页面缓存和模板缓存,再有数据缓存,就想不起来其他的了。
其实这都是有两面性的;具体还要看需求和数据量

Hot AI Tools

Undresser.AI Undress
AI-powered app for creating realistic nude photos

AI Clothes Remover
Online AI tool for removing clothes from photos.

Undress AI Tool
Undress images for free

Clothoff.io
AI clothes remover

AI Hentai Generator
Generate AI Hentai for free.

Hot Article

Hot Tools

Notepad++7.3.1
Easy-to-use and free code editor

SublimeText3 Chinese version
Chinese version, very easy to use

Zend Studio 13.0.1
Powerful PHP integrated development environment

Dreamweaver CS6
Visual web development tools

SublimeText3 Mac version
God-level code editing software (SublimeText3)

Hot Topics

In this chapter, we will understand the Environment Variables, General Configuration, Database Configuration and Email Configuration in CakePHP.

PHP 8.4 brings several new features, security improvements, and performance improvements with healthy amounts of feature deprecations and removals. This guide explains how to install PHP 8.4 or upgrade to PHP 8.4 on Ubuntu, Debian, or their derivati

To work with date and time in cakephp4, we are going to make use of the available FrozenTime class.

To work on file upload we are going to use the form helper. Here, is an example for file upload.

In this chapter, we are going to learn the following topics related to routing ?

CakePHP is an open-source framework for PHP. It is intended to make developing, deploying and maintaining applications much easier. CakePHP is based on a MVC-like architecture that is both powerful and easy to grasp. Models, Views, and Controllers gu

Visual Studio Code, also known as VS Code, is a free source code editor — or integrated development environment (IDE) — available for all major operating systems. With a large collection of extensions for many programming languages, VS Code can be c

Validator can be created by adding the following two lines in the controller.
