[pLog-svn] dynamic blog settings?

Christoph Feddersen feddersen at herr-der-ringe-film.de
Wed Jan 25 13:54:13 GMT 2006



Jon Daley wrote:
>     DNS, yes, the user would have to point his DNS to the correct IP. I 
> realized the other day that for the apache config, if I assigned a 
> separate ip for the lifetype install, I wouldn't have to have any 
> virtual host entries, so could avoid this part of the configuration.  
> But, of course, you don't have to use it like that.

Makes sense. So if anyone else wants to use this feature, a similar 
configuration is recommend (to minimize maintenance).

> 
>> Possible Danger: Once you configured your server to work with the new 
>> domain name everyone could use this domain for his blog. There's no 
>> check if the user is allowed to use this particular domain.
>     I don't understand.  Each blog only has one domain, and if a second 
> user tries to use the same domain as the first guy, lifetype wouldn't 
> let him.  (Maybe you are thinking of the wildcard discussion, and I am 
> not going to do that, I agree with Reto(?) who said that is better 
> handled by modrewrite).

Assuming:
User A, owner of mydomain.com
User B not owning a domain

User A points his DNS to your IP.
User A goes out for lunch.
User B uses WHOIS on user's A domain and sees that it points to your 
IP/Lifetype
User B goes to his control page (or registration screen) and assigns 
mydomain.com to his blog

This may be unlikely, but possible. What I wanted to say is that you 
can't determine weather a lifetype-user is the owner of a domain and is 
allowed to use a particular domain.
So I'd prefer some kind of manual approval to make sure that a user is 
authorized to use a domain name.




More information about the pLog-svn mailing list