[pLog-svn] dynamic blog settings?
Christoph Feddersen
feddersen at herr-der-ringe-film.de
Wed Jan 25 13:54:13 GMT 2006
Jon Daley wrote:
> DNS, yes, the user would have to point his DNS to the correct IP. I
> realized the other day that for the apache config, if I assigned a
> separate ip for the lifetype install, I wouldn't have to have any
> virtual host entries, so could avoid this part of the configuration.
> But, of course, you don't have to use it like that.
Makes sense. So if anyone else wants to use this feature, a similar
configuration is recommend (to minimize maintenance).
>
>> Possible Danger: Once you configured your server to work with the new
>> domain name everyone could use this domain for his blog. There's no
>> check if the user is allowed to use this particular domain.
> I don't understand. Each blog only has one domain, and if a second
> user tries to use the same domain as the first guy, lifetype wouldn't
> let him. (Maybe you are thinking of the wildcard discussion, and I am
> not going to do that, I agree with Reto(?) who said that is better
> handled by modrewrite).
Assuming:
User A, owner of mydomain.com
User B not owning a domain
User A points his DNS to your IP.
User A goes out for lunch.
User B uses WHOIS on user's A domain and sees that it points to your
IP/Lifetype
User B goes to his control page (or registration screen) and assigns
mydomain.com to his blog
This may be unlikely, but possible. What I wanted to say is that you
can't determine weather a lifetype-user is the owner of a domain and is
allowed to use a particular domain.
So I'd prefer some kind of manual approval to make sure that a user is
authorized to use a domain name.
More information about the pLog-svn
mailing list