Welcome Guest, Not a member yet? Register   Sign In
CI + YATS Library Question
#1

[eluser]vbnullchar[/eluser]
im using YATS as template library and it reveals the full url of my css, images and links etc.. dont you think this is a security issue?

heres my source code..
Code:
<title><?=property("app_title")." - ".$pageTitle ?></title>
    <meta http-equiv="content-type" content="text/html;charset=utf-8" />
    <meta name="description" content="<?=property("app_description") ?>" />
    <meta name="keywords" content="<?=property("app_keywords") ?>" />
    <meta name="Author" content="<?=property("app_author") ?>" />
    <meta name="Robots" content="index,follow" />    
    <?= style('style.css')?>

    <?= script('mootools.js') ?>

this is the generated html codes..
Code:
<title>iPortal - Overtimes</title>
    <meta http-equiv="content-type" content="text/html;charset=utf-8" />
    <meta name="description" content="iPortal" />
    <meta name="keywords" content="overtimes" />
    <meta name="Author" content="Yoshi Labarda" />
    <meta name="Robots" content="index,follow" />    
    <link rel="stylesheet" href="http://localhost/mice/assets/default/css/style.css" type="text/css" media="all" />

    
        <link rel="stylesheet" href="http://localhost/mice/assets/default/css/pagination.css" type="text/css" media="all" />
        
        
    <link rel="stylesheet" href="http://localhost/mice/assets/default/css/calendar.css" type="text/css" media="all" />
#2

[eluser]ccachor[/eluser]
No direct links to your site assets doesn't matter. They are downloaded to everyones browsers and unless you keep your passwords in CSS, you're all good!

I think most of us are using base_url in our paths for css and images anyways so it's the same thing. Hope that helps answer your question...I'm in a hurry!
#3

[eluser]vbnullchar[/eluser]
is there a way to just remove it
#4

[eluser]xwero[/eluser]
css, images and js are considered publicly accessible files. You can prevent them from being hotlinked or your code from being stolen but it will slow down your website if you don't use some kind of server apllication.




Theme © iAndrew 2016 - Forum software by © MyBB