Re: Google Web Accelerator
This WebDNA talk-list message is from 2005
It keeps the original formatting.
numero = 62008
interpreted = N
texte = Not easier for me. I have other languages that serve pages. Plus, one server config file is easier to modify than tens of DNA pages. I do try to keep destructive pages behind https://. Bill -----Original Message----- From: sal danna
Sent: Thu, 12 May 2005 07:01:41 -0700 To: "WebDNA Talk" Subject: Re: Google Web Accelerator Wouldn't it be easier to just put a [showif] on the protected pages that looks for X-moz^prefetch using [browsername] and [redirect] to 403 page SBD On 5/12/05, William DeVaul wrote: > So, if you want to block the web accelerator, here's what I saw on one > site for an .htaccess file: > > RewriteEngine on > RewriteBase / > RewriteCond %{REMOTE_ADDR} ^72.14.192. > RewriteCond %{REQUEST_URI} !^/google.html$ > RewriteRule ^.*$ /google.html > > The .htaccess sends the user of Web Accelerator to a page called > google.html, presumably to tell people not to use WA. This may not be > recommended because WA is a proxy and the google.html page may be > returned to the user when they click the link. > > For httpd.conf I've seen this on another site: > > RewriteEngine on > # google proxy: 72.14.192.0 - 72.14.207.255 > RewriteCond %{REMOTE_ADDR} ^72\.14\.(19[2-9]|20[1-7]) [OR] > # google prefetch > RewriteCond %{X-moz} ^prefetch > rewriterule .* - [F] > > The conf file entry sends a 403 response. This is better since a proxy > is not supposed to cache a 403 response. When the user clicks the > link, it should fetch the file directly from the browser. > > Thanks, > Bill > > > On May 12, 2005, at 5:04 AM, sal danna wrote: > > > [snip]They can't get to password protected areas, they don't cache > > https links, they don't cache news or large files. If you have the > > ability to "delete" or "cancel" something sensitive without all of > > those > > protections you are just asking for it to be deleted or > > canceled.[/snip] > > > > Doesn't matter if it's password protected or not because Google Web > > Accelerator is software you install in your browser so it's seeing > > whatever you are seeing (even if it's password protected). This is > > what the first link says you should do to protect your site: > > > > "If you have a web app, it might be worth returning a 403 when the > > HTTP_X_MOZ is set to "prefetch" header is sent. This will keep Web > > Accelerator from clicking destructive links." > > > > Sal D'Anna > > > > On 5/11/05, Donovan Brooke wrote: > >> Terry Wilson wrote: > >> > >>> Google is up to something we should all know about: > >>> > >>> http://37signals.com/svn/archives2/ > >>> google_web_accelerator_hey_not_so_fast_an_alert_for_web_app_designers > >>> .php > >>> > >>> > >>> and > >>> > >>> http://webaccelerator.google.com/webmasterhelp.html > >>> > >>> It's an accelerator that pre-fetches pages to give the illusion of > >>> faster web surfing. In admin pages, it can click links that will in > >>> turn > >>> delete or otherwise change database content. > >>> > >>> Anyone deal with this yet? > >>> > >>> Terry > >> > >> As far as the google information (your second link), I don't seen > >> anything > >> too alarming... They can't get to password protected areas, they > >> don't cache > >> https links, they don't cache news or large files. If you have the > >> ability to "delete" or "cancel" something sensitive without all of > >> those > >> protections you are just asking for it to be deleted or canceled. > >> > >> I'm still confused as to how it works exactly though.. The google > >> information > >> makes it sounds like it is only for those sites that impliment it. Is > >> that not the case? > >> > >> Donovan > >> > >> -- > >> =o=o=o=o=o=o=o=o=o=o=o=o=o=o=o=o=o=o=o=o=o=o=o=o=o > >> DONOVAN D. BROOKE Eucalyptus Design > >> <-Web Development (specializing in eCommerce), -> > >> <- Graphic Design, Custom Tags and Labels -> > >> > >> ADDRESS:> Donovan Brooke > >> DBA Eucalyptus Design > >> N2862 Summerville Park Rd. > >> Lodi, WI 53555 > >> PH:> 1.608.592.3567 > >> Web:> http://www.euca.us > >> =o=o=o=o=o=o=o=o=o=o=o=o=o=o=o=o=o=o=o=o=o=o=o=o=o > >> > >> ------------------------------------------------------------- > >> This message is sent to you because you are subscribed to > >> the mailing list . > >> To unsubscribe, E-mail to: > >> To switch to the DIGEST mode, E-mail to > >> > >> Web Archive of this list is at: http://webdna.smithmicro.com/ > >> > > > > ------------------------------------------------------------- > > This message is sent to you because you are subscribed to > > the mailing list . > > To unsubscribe, E-mail to: > > To switch to the DIGEST mode, E-mail to > > > > Web Archive of this list is at: http://webdna.smithmicro.com/ > > > > ------------------------------------------------------------- > This message is sent to you because you are subscribed to > the mailing list . > To unsubscribe, E-mail to: > To switch to the DIGEST mode, E-mail to > Web Archive of this list is at: http://webdna.smithmicro.com/ > ------------------------------------------------------------- This message is sent to you because you are subscribed to the mailing list . To unsubscribe, E-mail to: To switch to the DIGEST mode, E-mail to Web Archive of this list is at: http://webdna.smithmicro.com/ ------------------------------------------------------------- This message is sent to you because you are subscribed to the mailing list . To unsubscribe, E-mail to: To switch to the DIGEST mode, E-mail to Web Archive of this list is at: http://webdna.smithmicro.com/
Associated Messages, from the most recent to the oldest:
Not easier for me. I have other languages that serve pages. Plus, one server config file is easier to modify than tens of DNA pages. I do try to keep destructive pages behind https://. Bill -----Original Message----- From: sal danna Sent: Thu, 12 May 2005 07:01:41 -0700 To: "WebDNA Talk" Subject: Re: Google Web Accelerator Wouldn't it be easier to just put a [showif] on the protected pages that looks for X-moz^prefetch using [browsername] and [redirect] to 403 page SBD On 5/12/05, William DeVaul wrote: > So, if you want to block the web accelerator, here's what I saw on one > site for an .htaccess file: > > RewriteEngine on > RewriteBase / > RewriteCond %{REMOTE_ADDR} ^72.14.192. > RewriteCond %{REQUEST_URI} !^/google.html$ > RewriteRule ^.*$ /google.html > > The .htaccess sends the user of Web Accelerator to a page called > google.html, presumably to tell people not to use WA. This may not be > recommended because WA is a proxy and the google.html page may be > returned to the user when they click the link. > > For httpd.conf I've seen this on another site: > > RewriteEngine on > # google proxy: 72.14.192.0 - 72.14.207.255 > RewriteCond %{REMOTE_ADDR} ^72\.14\.(19[2-9]|20[1-7]) [OR] > # google prefetch > RewriteCond %{X-moz} ^prefetch > rewriterule .* - [F] > > The conf file entry sends a 403 response. This is better since a proxy > is not supposed to cache a 403 response. When the user clicks the > link, it should fetch the file directly from the browser. > > Thanks, > Bill > > > On May 12, 2005, at 5:04 AM, sal danna wrote: > > > [snip]They can't get to password protected areas, they don't cache > > https links, they don't cache news or large files. If you have the > > ability to "delete" or "cancel" something sensitive without all of > > those > > protections you are just asking for it to be deleted or > > canceled.[/snip] > > > > Doesn't matter if it's password protected or not because Google Web > > Accelerator is software you install in your browser so it's seeing > > whatever you are seeing (even if it's password protected). This is > > what the first link says you should do to protect your site: > > > > "If you have a web app, it might be worth returning a 403 when the > > HTTP_X_MOZ is set to "prefetch" header is sent. This will keep Web > > Accelerator from clicking destructive links." > > > > Sal D'Anna > > > > On 5/11/05, Donovan Brooke wrote: > >> Terry Wilson wrote: > >> > >>> Google is up to something we should all know about: > >>> > >>> http://37signals.com/svn/archives2/ > >>> google_web_accelerator_hey_not_so_fast_an_alert_for_web_app_designers > >>> .php > >>> > >>> > >>> and > >>> > >>> http://webaccelerator.google.com/webmasterhelp.html > >>> > >>> It's an accelerator that pre-fetches pages to give the illusion of > >>> faster web surfing. In admin pages, it can click links that will in > >>> turn > >>> delete or otherwise change database content. > >>> > >>> Anyone deal with this yet? > >>> > >>> Terry > >> > >> As far as the google information (your second link), I don't seen > >> anything > >> too alarming... They can't get to password protected areas, they > >> don't cache > >> https links, they don't cache news or large files. If you have the > >> ability to "delete" or "cancel" something sensitive without all of > >> those > >> protections you are just asking for it to be deleted or canceled. > >> > >> I'm still confused as to how it works exactly though.. The google > >> information > >> makes it sounds like it is only for those sites that impliment it. Is > >> that not the case? > >> > >> Donovan > >> > >> -- > >> =o=o=o=o=o=o=o=o=o=o=o=o=o=o=o=o=o=o=o=o=o=o=o=o=o > >> DONOVAN D. BROOKE Eucalyptus Design > >> <-Web Development (specializing in eCommerce), -> > >> <- Graphic Design, Custom Tags and Labels -> > >> > >> ADDRESS:> Donovan Brooke > >> DBA Eucalyptus Design > >> N2862 Summerville Park Rd. > >> Lodi, WI 53555 > >> PH:> 1.608.592.3567 > >> Web:> http://www.euca.us > >> =o=o=o=o=o=o=o=o=o=o=o=o=o=o=o=o=o=o=o=o=o=o=o=o=o > >> > >> ------------------------------------------------------------- > >> This message is sent to you because you are subscribed to > >> the mailing list . > >> To unsubscribe, E-mail to: > >> To switch to the DIGEST mode, E-mail to > >> > >> Web Archive of this list is at: http://webdna.smithmicro.com/ > >> > > > > ------------------------------------------------------------- > > This message is sent to you because you are subscribed to > > the mailing list . > > To unsubscribe, E-mail to: > > To switch to the DIGEST mode, E-mail to > > > > Web Archive of this list is at: http://webdna.smithmicro.com/ > > > > ------------------------------------------------------------- > This message is sent to you because you are subscribed to > the mailing list . > To unsubscribe, E-mail to: > To switch to the DIGEST mode, E-mail to > Web Archive of this list is at: http://webdna.smithmicro.com/ > ------------------------------------------------------------- This message is sent to you because you are subscribed to the mailing list . To unsubscribe, E-mail to: To switch to the DIGEST mode, E-mail to Web Archive of this list is at: http://webdna.smithmicro.com/ ------------------------------------------------------------- This message is sent to you because you are subscribed to the mailing list . To unsubscribe, E-mail to: To switch to the DIGEST mode, E-mail to Web Archive of this list is at: http://webdna.smithmicro.com/
devaulw@onebox.com
DOWNLOAD WEBDNA NOW!
Top Articles:
Talk List
The WebDNA community talk-list is the best place to get some help: several hundred extremely proficient programmers with an excellent knowledge of WebDNA and an excellent spirit will deliver all the tips and tricks you can imagine...
Related Readings:
Checking two required fields (1998)
too many nested ... problem (1997)
t or f (1997)
Associative lookup style? + bit more (1997)
Questions To Answer (1997)
Re:Transfer of data from Invoice to thank you templates (1998)
PSC recommends what date format yr 2000??? (1997)
[subTotal] pricefield in another database It#180#s not working!? (1998)
Searching Dates (2000)
Bug or syntax error on my part? (1997)
OT: How to get more traffic to a site? (2005)
PIXO support (1997)
Cancel Subscription (1996)
Update quantity (2000)
Item options w/ price adjustment (1997)
New Guy (2000)
Merry Christmas (2002)
email program problem (1998)
CA sales tax (1998)
WebCatalog can't find database (1997)