View Issue Detail

ID	Project	Category	Submitted / Last Updated
00961	UserSpice	Misc	2020-08-05 12:31:06 / 2021-09-28 09:51:46
Reported	Dan Hoover	Assigned To	Unassigned
Priority	normal	Reported	5.1.4
Status	acknowledged	Resolution Version and Commit
Summary	We need a place to store the site url for plugins
Description	<p>Anything that involves link creation (emails,oauth,shortlinks) needs this and I find myself recreatinging it on a per-plugin basis.</p> <p> </p> <p> </p>

November 2021

Also add a warning on the dashboard if it does not appear to match.
November 2021

We can easily generate this from the URL via a helper function. We can allow someone to reassign it to a permanent value if they need to (by overriding the function). Keeping US as portable as possible I would suggest is ideal.
November 2021

We can do some research on that, but a lot of the $_SERVER variables are vulnerable to XSS/Spoofing type attacks, so while they're nice for logging and convenience, relying on them for redirects and things like that has security implications. I totally agree on the portability though. That's one of my favorite things about US. Maybe even a hybrid approach where we point out on the dashboard that the server has detected a url change? Idk. This is more complicated than it seems at first glance.