Cakephp和设置故障通知

Question

I have two warnings related to cakephp security

Please change the value of 'Security.salt' in app/Config/core.php to a salt value specific to your application [CORE\Cake\Utility\Debugger.php, line 717]

Please change the value of 'Security.cipherSeed' in app/Config/core.php to a numeric (digits only) seed value specific to your application [CORE\Cake\Utility\Debugger.php, line 721]

But I have no idea of what that actually means. Is it just alright to leave them as they are even in really large and important applications ?

Answer 1

Well, reading those two messages, I would say you must edit the app/Config/core.php file, to put values that are specific to you / your application, and cannot be guessed, for the two Security.salt and Security.cipherSeed configuration entries.

Considering the names of those properties, using specific values (unique to your application, and not common to all Cakephp applications in the world) is probably better for security.

And, answering your "is it alright to leave them as they are ?" question : if you get security-related warnings, do you really think it's OK to just ignore them ?