Reading list Switch to dark mode

    Magento Admin URL Routing

    Updated 11 September 2013

    Url routing banner

    Magento Admin URL Routing – During the best marketplace module development in magento we have investigated security in a very deep sense . There is a lot of fuss why magento adds key in every admin url or magento custom module ?  here is the complete explanation of the magento URL routing and custom  module URL key addition .

    Why there is a need for magento admin URL key ? This is really important from point of view of security , magento key is a nonce  which will protect the system with the CSRF attacks . have a look at magento admin module url example

    as you can see here /key/bef2f86b1333fff53esssdb7d7bf7f84ac/ is a nonce which will be added to module index controller automatically

    Searching for an experienced
    Magento Company ?
    Find out More

    magenti url key


    if you will remove the key and then enter the url then it will redirect to main magento dashbaord controller. Every url have different and its own nonce .

    under system config of the magento these secret kets can be hide . you need to just disable it from magento system configuration

    secret keys can be obtain for a particular module case

          $key = Mage::getSingleton('adminhtml/url')

    as webkul here is namespace and modulename is module name of custom module e.g marketplace

    . . .

    Leave a Comment

    Your email address will not be published. Required fields are marked*

    Be the first to comment.

    Back to Top

    Message Sent!

    If you have more details or questions, you can reply to the received confirmation email.

    Back to Home