开发者

Is there an easy way to tell if a site is running expression engine?

I have tried looking for

  • Common paths for template files
  • Admin pages
  • Meta tags

Seems to be really easy for drupal/wordpress/textpattern - are there any quick tri开发者_如何学Ccks for ee?


I use the "BuiltWith Technology Profiler" that I have installed on Google Chrome. Not fool proof but I use it all the time to see what has been used to build sites (not just ExpressionEngine).

Get it here


I've found the easiest (and best) way to determine if a website is running ExpressionEngine is to inspect the cookies set by the site.

By default, an out-of-the-box ExpressionEngine installation names its cookies with the prefix exp_:

Is there an easy way to tell if a site is running expression engine?

Naturally, these Cookie Settings (Cookie Domain, Cookie Path and Cookie Prefix) can be overridden in the Control Panel, but many people never bother to change it from the default.

If they have, the prefix will be different but the rest of the cookie name will be unchanged.

For example, compare the following two cookies:

exp_last_visit        // Default EE Website
cms__last_visit       // Website for CampaignMonitor

You'll notice both cookies have in common last_visit (and so on for all cookie names).

You can test out this newfound knowledge on these popular, high-traffic ExpressionEngine:

  • A List Apart
  • CampaignMonitor
  • iLounge
  • Obama-Biden Change.gov

While there isn't a reliable way to determine what CMS a site may be running, trying to guess the system folder path, asset names, common paths and templates is time-consuming and not always indicative of the truth.


You can also look at the source of the site's Search tool (provided they're using EE's Search module) ... it will contain some EE-specific hidden fields:

Is there an easy way to tell if a site is running expression engine?


All URLs are default after index.php, i.e. http://www.testing.com/index.php/testing Many times they are rewritten, i.e. http://www.testing.com/testing So, a good way to tell would be to try to access any URL by adding a base directory of index.php. At least that's the only public way on our sites. We rename our admin folder as do many others so as to not allow that to be easily figured out by the public.

0

上一篇:

下一篇:

精彩评论

暂无评论...
验证码 换一张
取 消

最新问答

问答排行榜