+- CodeIgniter Forums (https://forum.codeigniter.com)
+-- Forum: Development (https://forum.codeigniter.com/forumdisplay.php?fid=6)
+--- Forum: Issues (https://forum.codeigniter.com/forumdisplay.php?fid=19)
+--- Thread: [split] CodeIgniter 3.0.3 and Windows (/showthread.php?tid=63508)
[split] CodeIgniter 3.0.3 and Windows - pabloveliz - 11-02-2015
Nice work on security... but my base_url gets detected as http://::1/webapp which doesn't work in my Win7/x64 using Chrome 46 when trying to access http://localhost/webapp
But, if I access as http://127.0.0.1/webapp the base_url gets detected as http://127.0.0.1/webapp as it should, even if I try with the IP of the net (192.168.80.24) it gets resolved, and works!!
Is this a windows issue? or a CI one?
Anyway... thanks for the UPDATE !!
RE: CodeIgniter 3.0.3 Released - rtorralba - 11-02-2015
(11-02-2015, 04:21 PM)pabloveliz Wrote: Nice work on security... but my base_url gets detected as http://::1/webapp which doesn't work in my Win7/x64 using Chrome 46 when trying to access http://localhost/webapp
But, if I access as http://127.0.0.1/webapp the base_url gets detected as http://127.0.0.1/webapp as it should, even if I try with the IP of the net (192.168.80.24) it gets resolved, and works!!
Is this a windows issue? or a CI one?
Anyway... thanks for the UPDATE !!
Is not for windows, is for a change in a new release for a security improvement. https://www.codeigniter.com/user_guide/installation/upgrade_303.html
RE: CodeIgniter 3.0.3 Released - Martin7483 - 11-03-2015
(11-02-2015, 04:21 PM)pabloveliz Wrote: Nice work on security... but my base_url gets detected as http://::1/webapp which doesn't work in my Win7/x64 using Chrome 46 when trying to access http://localhost/webapp
But, if I access as http://127.0.0.1/webapp the base_url gets detected as http://127.0.0.1/webapp as it should, even if I try with the IP of the net (192.168.80.24) it gets resolved, and works!!
Is this a windows issue? or a CI one?
Anyway... thanks for the UPDATE !!
I'm working on Windows and following this helped
Upgrading from 3.0.2 to 3.0.3
http://www.codeigniter.com/user_guide/installation/upgrade_303.html#step-2-make-sure-your-base-url-config-value-is-not-empty
PHP Code:
// Set the protocol
$protocol = 'http://';
if ( isset( $_SERVER["HTTPS"] ) && strtolower( $_SERVER["HTTPS"] ) == "on" ) {
$protocol = 'https://';
} else {
$_SERVER['HTTPS'] = 'off';
}
// Set the base_url
$config['base_url'] = $protocol.$_SERVER['HTTP_HOST'];
RE: CodeIgniter 3.0.3 Released - kenjis - 11-03-2015
@Martin7483
Do you know your code could allow Host header injection?
@pabloveliz
If you want to use http://localhost/, create config/development/config.php, and set the $config['base_url'].
RE: CodeIgniter 3.0.3 Released - Martin7483 - 11-03-2015
(11-03-2015, 02:46 AM)kenjis Wrote: @Martin7483
Do you know your code could allow Host header injection?
Ah, yes.
But I have this in my index.php
PHP Code:
/*
*---------------------------------------------------------------
* SANITIZE $_SERVER HTTP HOST
*---------------------------------------------------------------
*
* Set a whitelist of allowed domains
*/
$default_domain = 'mydomain.com';
$allowed_domains = array('mydomain.com');
if( ! in_array($_SERVER['HTTP_HOST'], $allowed_domains) ) {
$_SERVER['HTTP_HOST'] = $default_domain;
}