Bug #38422: Mass upload fils under 4.5.16 in FF with .htaccess protection - TYPO3 Core - TYPO3 Forge

Actions

Copy link

Bug #38422

closed

Mass upload fils under 4.5.16 in FF with .htaccess protection

Added by André Spindler over 12 years ago. Updated about 6 years ago.

Status:

Closed

Priority:

Must have

Assignee:

Steffen Gebert

Category:

Backend User Interface

Target version:

Start date:

2012-06-27

Due date:

% Done:

Estimated time:

TYPO3 Version:

4.5

PHP Version:

5.3

Tags:

Complexity:

Is Regression:

Sprint Focus:

Description

We use TYPO3 4.5.16 on a development site protected with .htaccess (complete webroot, protection with "AuthType Basic"), PHP Version is 5.3.3.

Since some days now it is not possible to use the mass flash uploader any more with firefox. In former times firefox/Flash requested the login data for htaccess authentification again, now there comes only an error message after selecting files (or only one file) for upload:
---------------------------
All of your uploads failed.

If this problem persists, please try another browser, contact your administrator or disable this "Flash Uploader" in your User Settings.

Detailed problem description:
The server returned the status code 401, which is related to a .htaccess file used for password protection on your server. Unfortunately this can not be handled by your browser's Flash plugin.
---------------------------

Firefox version is 13.0.1, Flash version is 11.3.300.262 on Win7pro 64bit.
But there is no problem when using the Internet Explorer (9) on the same operation system for the same TYPO3 installation to upload files using the mass uploader. And there is no login request, too...

Thanks,
André Spindler

Actions

Copy link

Updated by Lukas Rueegg over 12 years ago

Hi André

Obviously, Flash is not able to authenticate correctly. It seems that IE does it for the Flash-plugin.

You can add an exception in your .htaccess file to make it work in every browser. We do it the following way:

# Deny everything on this hostname
SetEnvIfNoCase Host host\.domain\.tld passreq
# Allow localhost
SetEnvIfNoCase Remote_Addr 127\.0\.0\.1 !passreq
# Allow Flash Uploader
SetEnvIfNoCase Request_URI "^\/typo3\/ajax\.php$" !passreq

AuthName "Website-Preview" 
AuthType Basic
AuthUserFile /home/www-data/<path>/.htpasswd
AuthGroupFile /dev/null
require valid-user
Order Allow,Deny
Allow from all
Deny from env=passreq
Satisfy any

This works perfectly.

I think, this is not a TYPO3-related issue.

Best regards
Lukas.

Actions

Copy link