[Phpmyadmin-devel] Redirecting external links

[Dieter Adriaenssens]

2011/1/31 Michal Čihař <michal at cihar.com>:
> Hi
>
> Dne Mon, 31 Jan 2011 16:23:03 +0100
> Dieter Adriaenssens <dieter.adriaenssens at gmail.com> napsal(a):
>
>> I just don't like the idea that for using my local version of PMA I
>> would need an external server to be available.
>> If I'm not mistaken, every click would be redirected through the
>> external site? If there is a slow connection with the external
>> redirector, it will slow down using your local version of PMA.
>
> I'm talking only about external links, not links inside phpMyAdmin. So
> it usually means (but is not limited to) links to documentation.

Ok, I got that wrong, thanks for clarifying.

>> This causes a lot of (unencrypted) traffic going to the external
>> server and back, while without the external redirector, only the
>> outgoing links might contain sensitive info that leaves your network.
>> (This of course doesn't apply when you access PMA on a remote website,
>> then everything is sent over the internet anyway)
>>
>> And about Google Analytics, it only applies if you installed it on
>> your site (which is not trivial/'out of the box'), and it gets the
>> Referer immediately, not by analysing the web server logs (but you
>> where refering to other tools, I guess ;) )
>
> Only if it is installed on external site. For example MySQL website uses
> SiteCatalyst which also does collect such data.
>
>> I'm just wondering if using the redirector-thing is not introducing
>> more problems than it solves? Wouldn't it be a better idea to keep the
>> url clean? I realise this is not always easy to do, and probably near
>> impossible when sessions are not allowed on a web browsing client.
>
> The url is already cleaned up by redirector inside phpMyAdmin. The only
> think which leaks right now is URL of the installation. (Talking about
> current git).

The question that remains is, what happens to the web server logs of
the phpmyadmin.net website? If it is hosted by sf.net, we (PMA
team/community/users) don't have control over it, so it can still be
analysed.

Kind regards,

Dieter

> --
>        Michal Čihař | http://cihar.com | http://blog.cihar.com
>
> ------------------------------------------------------------------------------
> Special Offer-- Download ArcSight Logger for FREE (a $49 USD value)!
> Finally, a world-class log management solution at an even better price-free!
> Download using promo code Free_Logger_4_Dev2Dev. Offer expires
> February 28th, so secure your free ArcSight Logger TODAY!
> http://p.sf.net/sfu/arcsight-sfd2d
> _______________________________________________
> Phpmyadmin-devel mailing list
> Phpmyadmin-devel at lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/phpmyadmin-devel
>
>



-- 
Groetjes,

Dieter Adriaenssens