| |
| |
|
|
|
|
| |
|
| |
|
| :: |
| Author |
Message |
lavinya
PR1
Joined: 24 Jul 2006
Posts: 159
Location: Turkey
|
 Posted: Thu Jan 17, 2008 10:43 pm Post subject: Server headers check result |
|
|
Hello. Here result for http://phpbb3.phpbb-seo.net/
Missing 200 OK status code redirect non seo url with sid url.
Missing cache control tag.
Missing pragma tag
missing expires tag
Here normal phpbb3 (NOT installed any seo mod, premod etc...)
Why?
This is a bug?
Please reply... |
|
|
| Back to top |
|
 |
|
|
dcz
Administrateur - Site Admin
Joined: 28 Apr 2006
Posts: 14279
|
|
| Back to top |
|
|
lavinya
PR1
Joined: 24 Jul 2006
Posts: 159
Location: Turkey
|
| Posted: Fri Jan 18, 2008 2:47 pm Post subject: Re: Server headers check result |
|
|
dcz thanks for reply.
This is a security risk! 
Phpbb3 cache-control must be: private, no-cache="set-cookie" HTTP 1.1
Phpbb3 Pragma=no-cache HTTP 1.0
phpbb3 expires= 0
| Code: |
HTTP Header RFC 2616
private
Indicates that all or part of the response message is intended for a single user and MUST NOT be cached by a shared cache. This allows an origin server to state that the specified parts of the response are intended for only one user and are not a valid response for requests by other users. A private (non-shared) cache MAY cache the response.
Note: This usage of the word private only controls where the response may be cached, and cannot ensure the privacy of the message content. |
Please see http://www.w3.org/Protocols/rfc2616/rfc2616-sec14.html#sec14.9.1
 |
|
|
| Back to top |
|
|
dcz
Administrateur - Site Admin
Joined: 28 Apr 2006
Posts: 14279
|
|
| Back to top |
|
|
|
| Navigation |
Similar Topics |
|
|
|
|
|
|
|
| |
|
|
|
|
| |
|
|
|
|
| |
