On Jun 16, 2010, at 9:28 AM, JuKuen wrote: > The idea is generating url`s which will hide what is the database used > to store the information and hiding the server side language wrapper. > example: > http://www.amazon.com/gp/product/1934356166/ref=s9_simv_bw_p14_i2?pf_rd_m=ATVPDKIKX0DER&pf_rd_s=center-4&pf_rd_r=0QDPNRG9W6H5YTMMF2G9&pf_rd_t=101&pf_rd_p=41171042&pf_rd_i=283155 > the idea is in the string generated after the product/ folder
Hiding the database shouldn't require any additional work beyond making sure your error messages don't point out that the database is. Hiding the server side language is harder... regardless of what URL you use. For example... if /images/rails.png exists, good chance it's Rails :) Lots of people forget to remove it. Or, if the server sends back the following header... X-Powered-By: Phusion Passenger (mod_rails/mod_rack) 2.2.5 Good chance it's Rails. You can configure it not to do this, but there are other ways too... just look for common Rails idioms (asset timestamping, etc.) Dig deeper at the network level and you can even figure out the OS in many cases... Just saying that it's probably not possible to truly hide this information from someone determined enough to get it. -philip -- You received this message because you are subscribed to the Google Groups "Ruby on Rails: Talk" group. To post to this group, send email to [email protected]. To unsubscribe from this group, send email to [email protected]. For more options, visit this group at http://groups.google.com/group/rubyonrails-talk?hl=en.
