New user enquiring on the ?x=filename.html

[nadine]

I just installed pixelpost when I realised that the Browse and About links have the urls with ?x=browse and ?x=about

I'd like to ask is this the same as ?x=about.html ? I've read on sites that the ?x=about.html method is very insecure and that it allows hackers to gain access to the servers.

found http://www.codegrrl.com/forums/index.php?showtopic=3967

Could someone assisst me? Thanks.

[raminia]

it uses
x=foo
for loading
foo_template.html

[raminia]

I don't think that's a problem here since Pixelpost only gets the content of template files inside the template folder and processes them. if the x=filename is not in the template folder it will simply bring the index.php.

with this method only the file content of templates with name as xxx_template.html are accessable.

[Rob]

Raminia is correct, this is not insecure because we use x=aaa to construct a template that gets read in. Unless you have a whole bunch of very sensitive files on your server that end in _template.html you will be just fine ;)

[nadine]

thanks so much! :)