• From: Ottawa, Canada
  • Registered: 2006-09-05
  • Posts: 308

Topic: Silly bug :P

I ran into a problem today while creating a new forum. https is the ONLY way to access my site. After a fresh install of punbb 1.12.14 the basedir was set to http://addresses. It took me about 30 minutes looking over the str_replace + preg_match in confirm_referrer before I suddenly realized it wasn't doing anything to the http:// part of the address. So the code that for whatever reason removed the https:// part of the address during install should be updated IMHO :P

Also, while fumbling around my problem I came across another bug, but the private security related submit thing isn't working. I can't think right now due to a hangover, so I'm unsure if it could be used to do anything... at all, but I'm sure functions are there for a reason... :P

echo "deadram"; echo; fortune;
  • Registered: 2006-06-05
  • Posts: 410

Re: Silly bug :P

install.php has "http" by default, but it doesn't remove it if you put it there (neither does admin_options). I don't see any replacements in `confirm_referrer` either?

  • Smartys
  • Former PunBB Developer
  • Offline
  • Registered: 2004-04-30
  • Posts: 7,844

Re: Silly bug :P

If the security email address isn't working for you, send me (or another developer) an email
Moved to Troubleshooting, since https isn't replaced by PunBB

  • Registered: 2006-06-05
  • Posts: 410

Re: Silly bug :P

FWIW, this is the part of install.php I was talking about:

<label><strong>Base URL</strong><br /><input type="text" name="req_base_url" value="http://<?php echo $_SERVER['SERVER_NAME'].str_replace('\\', '/', dirname($_SERVER['SCRIPT_NAME'])) ?>" size="60" maxlength="100" /><br /></label>
  • From: Ottawa, Canada
  • Registered: 2006-09-05
  • Posts: 308

Re: Silly bug :P

Yah, the value="http://..." is what I'm talking about,

in one of the environment variables the full path to the forum along with the protocal is there... that's what install.php should use ;p

echo "deadram"; echo; fortune;
  • Smartys
  • Former PunBB Developer
  • Offline
  • Registered: 2004-04-30
  • Posts: 7,844

Re: Silly bug :P

Aha smile
I'm still not declaring it a bug, but I'll see about having the auto-detect script check for HTTPS wink

Edit: and it's in

7 Reply by pun (edited by pun 2007-04-01 21:27)

  • pun
  • New Member
  • Offline
  • Registered: 2007-04-01
  • Posts: 1

Re: Silly bug :P

That is strange... :S

Your link doesn't do anything for me, but the Javascript looks suspicious nonetheless. /pogenwurst