Bug #53188
closed
REDIRECT_TYPO3_DISABLE_CORE_UPDATER ignored
100%
Description
Using Apache mod_rewrite in certain setups makes environment variables from original requests available in the target request as REDIRECT_<envvar>, thus setting TYPO3_DISABLE_CORE_UPDATER becomes REDIRECT_TYPO3_DISABLE_CORE_UPDATER.
The latter is currently not considered by TYPO3, thus the core updater cannot be disabled via the environment variable and the mentioned setup.
See this Stackoverflow post for an explanation and link to the Apache source code.
Files
Updated by Philipp Gampe about 11 years ago
- Status changed from New to Accepted
Can you create a patch for this? http://wiki.typo3.org/CWT
Updated by Mathias Brodala about 11 years ago
- File 53188.patch 53188.patch added
Here's the patch, as the way written in the CWT is far from trivial but the actual fix is.
Updated by Alexander Stehlik about 11 years ago
Should this be moved to GeneralUtility::getIndpEnv()?
Updated by Gerrit Code Review about 11 years ago
- Status changed from Accepted to Under Review
Patch set 1 for branch master has been pushed to the review server.
It is available at https://review.typo3.org/25123
Updated by Mathias Brodala over 10 years ago
- File 53188-getindpenv.patch 53188-getindpenv.patch added
Philipp Gampe wrote:
Can you create a patch for this? http://wiki.typo3.org/CWT
I now did this by modifying the existing change as written in the CWT, not sure if it ends up on the review server. Attached is the same change as patch in case it doesn't.
This patch enables retrieving REDIRECT_TYPO3_DISABLE_CORE_UPDATER via GeneralUtility::getIndpEnv() and adds GeneralUtility::getRedirectEnvironmentVariable() for reading an environment variable possibly prefixed by REDIRECT_ (up to 5 times).
Updated by Gerrit Code Review over 10 years ago
Patch set 2 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/25123
Updated by Mathias Brodala over 10 years ago
Gerrit Code Review wrote:
Patch set 2 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/25123
Now it worked and was my fault: I did clone my local TYPO3.CMS repository to avoid downloading it all again. So obviously the remote URL was not git.typo3.org and thus everything failed.
Updated by Gerrit Code Review over 10 years ago
Patch set 3 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/25123
Updated by Gerrit Code Review over 10 years ago
Patch set 4 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/25123
Updated by Helmut Hummel over 10 years ago
Before moving further: What is on exact use case/ configuration where we will be affected by this?
In particular:
Using Apache mod_rewrite in certain setups
What are these certain setups?
Updated by Mathias Brodala over 10 years ago
Helmut Hummel wrote:
Before moving further: What is on exact use case/ configuration where we will be affected by this?
In particular:
Using Apache mod_rewrite in certain setups
What are these certain setups?
See the docblock for the new GeneralUtility::getEnvironmentVariableWithRedirectPrefix() method:
Returns an environment variable taking possible "REDIRECT_"
prefixes into account (e.g. due to PHP running in CGI mode)
Thus the following combination is affected: Apache + mod_rewrite + PHP (CGI)
I admit that the mod_rewrite part is not mentioned in the docblock. Should it be added?
Updated by Chris topher over 10 years ago
- Subject changed from REDIRECT_TYPO3_DISABLED_CORE_UPDATER ignored to REDIRECT_TYPO3_DISABLE_CORE_UPDATER ignored
Updated by Mathias Brodala over 10 years ago
Apparently the same issue also appears with PHP in FastCGI.
Updated by Gerrit Code Review over 10 years ago
Patch set 5 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/25123
Updated by Gerrit Code Review over 10 years ago
Patch set 6 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/25123
Updated by Gerrit Code Review over 10 years ago
Patch set 7 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/25123
Updated by Gerrit Code Review over 10 years ago
Patch set 8 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/25123
Updated by Gerrit Code Review over 10 years ago
Patch set 9 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/25123
Updated by Steffen Müller over 10 years ago
- Status changed from Under Review to Resolved
- % Done changed from 0 to 100
Applied in changeset f2ef9fab1107b1fe067451c00e26eba4ec9e7bad.
Updated by Riccardo De Contardi about 7 years ago
- Status changed from Resolved to Closed