PHP缓存安全性：文件缓存与内存缓存

Question

Are there any relevant security issues in using a file cache (i.e. PEAR Cache_Lite) to hold data (serialized arrays, objects) in PHP? Is a data cache more secure in memory, i.e. using memcache or APC?

Answer 1

Since you mentioned: Security from hackers, the answer would be no..

If somebody is able to access your filesystem or system in general, they will have access to pretty much everything, including your mysql data.

When it comes to caching, the main extra worry you have is if you are sharing the server with other people.

If you are using memcache, you do want to make absolutely sure that nobody can access the memcache server from outside. Do you have a firewall? Do you only keep the ports open that you must?

If the answer to those is yes, then your biggest security problem is your own application.