I'm using :
TYPO3 6.2
I want to add more security and restrict access to our website backend only to our IP range. Problem : I believe my company use a proxy and :
getenv:HTTP_HOST -> the same for everyone
But if I display in typoscript :
getenv:HTTP_X_FORWARDED_FOR -> then the real IP appears !
But the parameter [BE][IPmaskList] only cares about the HTTP_HOST, not the FORWARDED FOR. How to solve my issue ?
I also tried with .htaccess in the /typo3/ folder, but it doesn't work :
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteCond %{HTTP:X-FORWARDED-FOR} !^10$
RewriteRule ^$ http://www.mycompany.com [R=301,L]
</IfModule>
(btw mod_rewrite is working fine, I use it in the parent htaccess for url rewriting). My goal is to deny backend from all except if HTTP:X-FORWARDED-FOR begins with 10.x.x.x
I would restrict it with a htaccess file. However if you care about security you should consider an update to latest version 8.7 as 6.2 is already end of life! You can also buy an extended support from the typo3 GmbH at typo3.com
according to:
https://github.com/TYPO3/typo3/blob/TYPO3_6-2/typo3/sysext/backend/Classes/FrontendBackendUserAuthentication.php#L187
and:
https://github.com/TYPO3/typo3/blob/TYPO3_6-2/typo3/sysext/core/Classes/Utility/GeneralUtility.php#L3468
IPmaskList has nothing to do with HTTP_HOST.
Maybe your TYPO3 is running behind a reverse proxy,
then you need to set "reverseProxyIP" and "reverseProxyHeaderMultiValue" properly.
Related
I created a site configuration in Typo3 10.4.11 for the entry point www.example.com. When browsing to example.com (without www), I get an error message:
Page Not Found The page did not exist or was inaccessible. Reason: No
site configuration found.
I tried to create a static route, which didn´t work. Any other ideas how to redirect to the original page from www.example.com as well as example.com?
If you're running on Apache, I'd suggest to add a redirect to your .htaccess file:
RewriteCond %{HTTP_HOST} ^example\.com$
RewriteRule ^(.*)$ http://www.example.com/$1 [L,R=301]
Put the snippet near to the line with RewriteEngine On.
If you want to have both domains served by TYPO3, then the EXT: host_variants may be an option.
https://github.com/b13/host_variants
I have DNS managed by NO-IP and self hosted websites on a QNAP, with Virtual hosts defined in the Qnap Software.
My sites are www.site1.com, www.site2.com and a new www.site3.com which (this one will work with subdomains created by wildcards at Users input in Joomla) (ex user1.site3.com would be the redirection of the site3.com/index.php/users/user1) and all are located in (root) web_folder/site1/...site2/...site3/ . The other sites have their virtual hosts working right.
Now, before doing that, i am getting stuck on this Qnap issue where i can't define my wildcard dns *.site3.com in the virtual hosts. I want to do this because when i enter in the browser anything.site3.com it gets me to the index.html file located in the root folder of my published sites (web/index.html)
What shoud I try in order for the subdomains to pass the root index and go directly to the website folder, where i could place my .htaccess containing the rewrite rules?
I tried with a .htaccess but couldn't manage what to write in order for it to work.
Define the wildcard in the qnap virtual host but does not accept
What am i thinking wrong?
I would like to avoid having a .htacces, in the web folder, to redirect every domain/subdomain to it's respective subfolder and afterwards having another .htaccess insinde my site3 folder which does the rest of the rewrites (subdomains wildcard and user based)
I have managed to do so far:
I shall partially answer to my question
RewriteEngine On
Options +FollowSymlinks
RewriteCond %{HTTP_HOST} !^www\.site3\.com<br>
RewriteCond %{HTTP_HOST} !^static\.site3\.com<br>
RewriteCond %{HTTP_HOST} ^(www\.)?(.+)\.site3.com$ [NC]
RewriteRule ^(.*)$ http://site3.com/index.php/user/%2 [L]
The thing is, I would like to still see user.site3.com instead of the full link.
As an update. I am running wordpress multisite. My www.site3.com comes into the qnap(web or public_html folder) then the NAS virtual host manager redirects it to its actual subfolder (site3).
In this situation, when i write :
-anything.site3.com it reads my top (web or public_html) index and i can't get to the wordpress subpages. (my anything.site3.com page has been created from user-end)
-site3.com it goes to mi site3 folder as it should, managed by the qnap virtual host (i don't have to write additional htaccess.
So i need to somehow let my subdomains pass the redirection from the qnap and go to my site3 subfolder and then wordpress htaccess do it's job. This should be done so that i don't have a continuous loop!
Sorry for my explanations might be a little bit messed.
Since upgrading to iOS 7, my iPhone could no longer access my Baikal Card DAV server. On the project's GitHub page, there are several issues open regarding this issue, but none could help me getting my iPhone talk to the server. How can I make this work?
The important thing is to add these lines to your .htaccess
RewriteEngine On
# iOS 7 (and later)
RewriteRule /.well-known/carddav /card.php [R,L]
RewriteRule /.well-known/caldav /cal.php [R,L]
# Mac OS X 10.10
Redirect /.well-known/carddav /card.php
You then setup the Cal DAV as described in the installation instructions. For Card DAV make sure to follow these steps.
Server your.server.url (without http[s]-prefixes)
User name and password
Make sure the Account URL in the advanced settings looks like this: https://your.server.url/card.php/principals/username
I used the Flat File method via FTP and no .well-known directory is made. Therefore, I removed .well-known and made it work with:
RewriteRule /carddav /card.php [R,L]
RewriteRule /caldav /cal.php [R,L]
This is also above the rule:
RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization},L]
I am running my web server via a different port as well. Thanks for your config, just a little tweaking was required to make life good.
iPhone 5S IOS 7.0.4
Baikal FLAT FILE 0.2.7
Synology NAS 412+ DSM 4.3-3827
I have several small projects I want to host on single virtual host using Zend Framework. The structure is:
apps/
testapp1/
application/
index.php,
testapp2/
application/
index.php
Document root in virtual host looks like: DocumentRoot /var/www/apps/
I need univeral mod_rewrite rule which will transform URLs like /apps/testapp1/xxx into /apps/testapp1/index.php.
Any help will be greatly appreciated as I am trying to resolve that for several hours. Thank You.
If your DocumentRoot for website is /var/www/apps/, then I guess URLs would be http://www.example.com/testapp1/ajax instead of http://www.example.com/apps/testapp1/ajax. If so -- then you need to remove apps/ part from these rules.
These rules need to be placed in your .htaccess into website root folder.
If you already have some rules there then these new rules needs to be placed in correct place as order of rules matters.
You may need to add RewriteEngine On line there if you do not have such yet.
This rule will rewrite /apps/testapp1/ajax into /apps/testapp1/index.php, no other URLs will be affected:
RewriteRule ^apps/testapp1/ajax$ /apps/testapp1/index.php [NC,QSA,L]
This rule will rewrite ALL URLs that end with /ajax into /index.php (e.g. /apps/testapp1/ajax => /apps/testapp1/index.php as well as /apps/testapp2/ajax => /apps/testapp2/index.php):
RewriteRule ^(.+)/ajax$ /$1/index.php [NC,QSA,L]
UPDATE:
This "universal" rule will rewrite /apps/testapp1/xxx into /apps/testapp1/index.php as well as /apps/testapp2/something => /apps/testapp2/index.php:
RewriteRule ^(.+)/([^/\.]+)$ /$1/index.php [NC,QSA,L]
I have a domain... let's say www.myOldDomain.com. It is currently running a site about local services near you.
I got a new domain (www.myNewDomain.com), it is also going to run a site about local services near you (albeit in a slightly different way). In fact, I want to totally replace www.myOldDomain.com with www.myNewDomain.com - on the same host using the same hosting account ( I don't want to pay for 2 accounts).
I want ANY traffic to www.myOldDomain.com/* to be redirected to www.myNewDomain.com/WelcomeOldDomainers
How would I go about doing that? Would I do it programmatically, or at DNS?
Update: This is on a Windows host.
Linux Hosting
The best way is using a .htaccess file at the root of your website directory if you are under linux hosting :
RewriteEngine on
RewriteCond %{HTTP_HOST} ^www.myOldDomain\.com/$1 [NC]
RewriteRule ^(.*)$ http://www.myNewDomain.com/$1 [R=301,L]
Beware though : this assumes the $1 part of your old domain is the same than your $1 of your new domain. And from reading your post I'm not sure this is the case.
.htaccess allows you to configure that in a very flexible way though.
Look on google for "URL Rewriting" and "htaccess redirection"
Windows Hosting :
You can use the web.config file from your IIS 7 or superior :
http://learn.iis.net/page.aspx/557/translate-htaccess-content-to-iis-webconfig/
Beware though Bis : Be careful not to leave old pages SEO goes to waste and be sure to map the best you can old pages to new pages or you'll loose all the SEO juice you have been building for these old pages.
The best option is to send a HTTP/1.1 301 Moved Permanently
In ASP.NET you would set Response.Redirect("www.myNewDomain.com/WelcomeOldDomainers")
in global.aspx