Does the unit of measure matter when you are solving for the diameter of a circumference?

Using credit/debit card details vs swiping a card in a payment (credit card) terminal

Why do airplanes use an axial flow jet engine instead of a more compact centrifugal jet engine?

Statue View: 2, 3, 5, 7

Pirate democracy at its finest

How do Human Traits Work?

Construct a word ladder

How to pull out the underlying query syntax being used by dataset?

Passively reducing ground loss?

Does Nitrogen inside commercial airliner wheels prevent blowouts on touchdown?

Compactness of finite sets

Where is the logic in castrating fighters?

Should I disclose a colleague's illness (that I should not know) when others badmouth him

Who will lead the country until there is a new Tory leader?

Why did David Cameron offer a referendum on the European Union?

Cipher Block Chaining - How do you change the plaintext of all blocks?

Is neural networks training done one-by-one?

Adding spaces to string based on list

Count Even Digits In Number

How to illustrate the Mean Value theorem?

Flying domestically in the US, is my State Issued ID all I need to get past security?

Why colon to denote that a value belongs to a type?

Why do Windows registry hives appear empty?

Is there some hidden joke behind the "it's never lupus" running gag in House?

Magento 2.3: How to configure magento CLI commands to use custom names for dangerous redis commands

Move magento site with redis to server without redis how to disable redisHow to configure Redis Session Storage?Redis version requirement for Magento 2?How to configure Redis Cluster in Magento 2Magento + Redis: same config for two different instances - safe?Magento cli no commandsMagento 2: Batch for CLI-commandsRedis vs Memcached for Magento 2.3?Magento 2.3 Useful SSH CLI Commands ListMagento 2.2.5 After Upgrade To 2.3 CLI commands don't work

.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty margin-bottom:0;

1

Environment

OS: Ubuntu 18.04 LTS

Server: Apache 2.4

Database: MySQL v14.14 distribution 5.7.25

PHP: 7.2

Redis: 5.0.4

Issue

Following the digitalocean tutorial referenced within the magento devdocs, I am directed to another digitalocean tutorial in order to properly complete the 'Securing Redis' section.

In order to complete 'Step 5 - Renaming Dangerous Commands', I must modify the magento installation to ensure that magento uses my alternative names, rather than the default command names.

Steps taken

There is no 'out-of-the-box' method for doing this and so I am unsure how to proceed.

Presumably, I could either create a module to extend Magento's caching features, or, I could use an external software or script to execute the Redis commands alongside the functional elements of the default Magento commands.

Ideally, I would like to store the command names as environment variables, then have a custom module within magento retrieve the command names and override those used by default.

I originally raised this as an issue on Magento's github, though the dev team does not consider this security flaw an issue and so they told me to raise it as a feature request on their 'community features' github project page.

magento2 cache security cli redis

share|improve this question

edited May 20 at 17:22

Joshua Flood

asked Apr 13 at 17:31

Joshua FloodJoshua Flood

443227

add a comment | 

1

Environment

OS: Ubuntu 18.04 LTS

Server: Apache 2.4

Database: MySQL v14.14 distribution 5.7.25

PHP: 7.2

Redis: 5.0.4

Issue

Following the digitalocean tutorial referenced within the magento devdocs, I am directed to another digitalocean tutorial in order to properly complete the 'Securing Redis' section.

In order to complete 'Step 5 - Renaming Dangerous Commands', I must modify the magento installation to ensure that magento uses my alternative names, rather than the default command names.

Steps taken

There is no 'out-of-the-box' method for doing this and so I am unsure how to proceed.

Presumably, I could either create a module to extend Magento's caching features, or, I could use an external software or script to execute the Redis commands alongside the functional elements of the default Magento commands.

Ideally, I would like to store the command names as environment variables, then have a custom module within magento retrieve the command names and override those used by default.

I originally raised this as an issue on Magento's github, though the dev team does not consider this security flaw an issue and so they told me to raise it as a feature request on their 'community features' github project page.

magento2 cache security cli redis

share|improve this question

edited May 20 at 17:22

Joshua Flood

asked Apr 13 at 17:31

Joshua FloodJoshua Flood

443227

add a comment | 

Environment

OS: Ubuntu 18.04 LTS

Server: Apache 2.4

Database: MySQL v14.14 distribution 5.7.25

PHP: 7.2

Redis: 5.0.4

Issue

Following the digitalocean tutorial referenced within the magento devdocs, I am directed to another digitalocean tutorial in order to properly complete the 'Securing Redis' section.

In order to complete 'Step 5 - Renaming Dangerous Commands', I must modify the magento installation to ensure that magento uses my alternative names, rather than the default command names.

Steps taken

There is no 'out-of-the-box' method for doing this and so I am unsure how to proceed.

Presumably, I could either create a module to extend Magento's caching features, or, I could use an external software or script to execute the Redis commands alongside the functional elements of the default Magento commands.

Ideally, I would like to store the command names as environment variables, then have a custom module within magento retrieve the command names and override those used by default.

I originally raised this as an issue on Magento's github, though the dev team does not consider this security flaw an issue and so they told me to raise it as a feature request on their 'community features' github project page.

magento2 cache security cli redis

share|improve this question

edited May 20 at 17:22

Joshua Flood

asked Apr 13 at 17:31

Joshua FloodJoshua Flood

443227

share|improve this question

edited May 20 at 17:22

Joshua Flood

asked Apr 13 at 17:31

Joshua FloodJoshua Flood

443227

share|improve this question

edited May 20 at 17:22

Joshua Flood

asked Apr 13 at 17:31

Joshua FloodJoshua Flood

443227

asked Apr 13 at 17:31

Joshua FloodJoshua Flood

443227

asked Apr 13 at 17:31

Joshua FloodJoshua Flood

443227