search

SachinSAgrawal / YOURLS-Device-Details

A YOURLS plugin to parse the user-agent and display info about the IP and device.
MIT License
10 stars 2 forks source link

Why the link stats page has to be public? #1

Closed BenYangOvO closed 5 months ago

BenYangOvO commented 5 months ago

Just wanted to prevent access log data from being scanned by random cyber attackers, and out of some concern on privacy and my curious.

SachinSAgrawal commented 5 months ago

It doesn't have to be if you want to install this plugin on a private instance, but if you want to mimic something like Grabify, I would recommend making the stats page public. Having the stats page public with or without this plugin is still a security vulnerability, so it really depends on how much risk you want to take. I hope that answers your question.