.xml and .gz format
« on: April 11, 2009, 02:19:54 PM »
Hello

Not excactly sure if this is a bug but does seem like a security issue unless I have setup the sitemap generator incorrectly.

I want to have a .xml and a .gz sitemap available on my website.

So what I did was to have 2 occurences of the generator on the website in 2 different folders and with different passwords - 1 version generates the .xml and the other the .gz

if I log into one of the generators everthing seems fine.

But what I have found is that if some one tries to log into the other generator the login process is bypassed even although the 2nd version has a different password.

What can I do to fix this ?

Thanks ... Dennis

Re: .xml and .gz format
« Reply #1 on: April 12, 2009, 09:53:04 PM »
Hello,

the cookie for the sitemap generator is based on domain name, so you can have multiple generator instances on your own domain with being logged in automatically. Of course, it won't work with external domains.