$memcache_obj = memcache_connect('My server's IP address', 11211);

Using this php code, could anyone can connect to my Memcached server and put something using memcached_get()?

Is it a security problem? How can I block access to it?


Until recently (1.4.3) memcached had no support for authentication, so anyone who could connect to memcached could do whatever they wanted.

You can set up authentication if you wish, and your version of memcached is recent enough.

You also should firewall the port, allowing only specific IP addresses in your network to connect to memcached. This will help regardless of version.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.