Can't login if visiting directly

Started by WAS, March 18, 2018, 06:00:07 PM

Previous topic - Next topic

WAS

You can't login if you visit the forums specifically from Chrome/Firefox tab quicklinks because the reference URL is a chrome/firefox specific address or non-existent.  Gives you a error along the lines of "Reference URL can't be validated, go back and try again"

Matt

Just because milk is white doesn't mean that clouds are made of milk.

WAS

#2
Quote from: Matt on March 18, 2018, 07:15:57 PM
Oshyan has some instructions here:

https://planetside.co.uk/forums/index.php/topic,24211.msg245566.html#msg245566

Matt

Those steps are done automatically every time I close my browser or start my computer (CCleaner), and have been dumped dozens of times since the move. They also should have nothing to do with PHPs ability to read the reference URL.

This appears to be the forums PHP system not recognizing the referral URL ($_SERVER['HTTP_REFERER']) if it comes form Mozilla's quick links, which the URL is "about:newtab" or blank. Basically you have to go to the forums, click a link, so your reference URL is from the forums (or come from Google search results), and THAN login.

luvsmuzik

I am wondering if perhaps we need to create a new bookmark for login, since the old code would be in that one. Mine has updated on its own finally, no problems this week.

WAS

#4
Quote from: luvsmuzik on March 19, 2018, 06:02:00 PM
I am wondering if perhaps we need to create a new bookmark for login, since the old code would be in that one. Mine has updated on its own finally, no problems this week.

My quick-link is just https://planetside.co.uk/forums/index.php for the main forums. I never had any DNS issues. This is entirely related to the forums security check for referrer URLs, PHP related. Either Fireforx is sending "about:newtab" as a referrer, or the forums for some reason aren't accepting no referrer (meaning someone directly went to the website)

If "about:newtab" is being sent, that's clearly not a valid URL, but is valid for the browser, and may need to be added to exceptions within the forums module code. It's pretty common to use your browsers newtabs quicklinks these days.

jaf

Finally back on this morning. Lots of catching up to do.
(04Dec20) Ryzen 1800x, 970 EVO 1TB M.2 SSD, Corsair Vengeance 64GB DDR4 3200 Mem,  EVGA GeForce GTX 1080 Ti FTW3 Graphics 457.51 (04Dec20), Win 10 Pro x64, Terragen Pro 4.5.43 Frontier, BenchMark 0:10:02

Oshyan

I don't use the "quicklinks" you're talking about. Can you edit them manually? The index.php is not needed and in fact should probably be removed. Obviously the forums directs you there from /forums/ but I suspect it may help your problem. Likely this is due to how SMF handles secure (https) sites.

- Oshyan

WAS

Quote from: Oshyan on March 20, 2018, 04:34:20 PM
I don't use the "quicklinks" you're talking about. Can you edit them manually? The index.php is not needed and in fact should probably be removed. Obviously the forums directs you there from /forums/ but I suspect it may help your problem. Likely this is due to how SMF handles secure (https) sites.

- Oshyan

It shouldn't matter, as Apache/NGINX or w/e will forward to the default web directory file, being index.html, index.htm, and finally index.php (whichever exists first)

Oshyan

But... did you actually *try* it?

- Oshyan