FUDforum
Fast Uncompromising Discussions. FUDforum will get your users talking.

Home » FUDforum » How To » Link to a forum
Show: Today's Messages :: Polls :: Message Navigator
Return to the default flat view Create a new topic Submit Reply
Re: Link to a forum [message #14752 is a reply to message #14751] Wed, 19 November 2003 22:56 Go to previous messageGo to previous message
Ilia is currently offline  Ilia   Canada
Messages: 13241
Registered: January 2002
Karma:
Senior Member
Administrator
Core Developer
You are correct, SQ is needed to prevent session hijacking and other nasty tricks that could be used. XSS issues are something else and the protection for them is else where.

I suppose you could modify the code to not do SQ completely by changing the code inside users.inc.t. But given the security issues it creates it is not something I would like to allow people to disable normally.

The real solution may be a clever JavaScript hack of sorts. I've looked at the google JavaScript and the URL handling code appears to be:
if (window.google_page_url == null) {
google_page_url = document.referrer;
if (window.top.location == document.location) {
google_page_url = document.location;
}
}

So, maybe you can use JavaScript to modify the value of document.referrer & document.location removing the SQ bit internally to allow for common URL.

Check on Google's support site, I am almost certain such issues have come up before and there maybe solutions I haven't even considered.


FUDforum Core Developer
[Message index]
 
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Previous Topic: poster_id
Next Topic: Move the forum folder
Goto Forum:
  

-=] Back to Top [=-
[ Syndicate this forum (XML) ] [ RSS ]

Current Time: Wed Nov 27 17:28:53 GMT 2024

Total time taken to generate the page: 0.04167 seconds