Some servers include the port number in $_SERVER["HTTP_HOST"], $_ENV["HTTP_HOST"] and so on. This causes a misinterpretation in mainfile.php, where it checks for REQUEST_METHODE == "POST" to protect from form posts from external pages and hacks.
The port number isnt transmitted in $_SERVER["HTTP_REFERER"], so it shows the error msg.
Better compare HTTP_REFERER with SERVER_NAME at this point!
Bugfix:
Open File "mainfile.php"
FIND:
Code:
if (!stripos_clone($_SERVER['HTTP_REFERER'], $_SERVER['HTTP_HOST'])) {
REPLACE WITH:
Code:
if (!stripos_clone($_SERVER['HTTP_REFERER'], $_SERVER['SERVER_NAME'])) {
Save file "mainfile.php"
Xai Rho
dezina Support Mod
Joined: Jun 09, 2003
Posts: 1713
Location: England
Posted:
Wed Jan 25, 2006 10:35 am
Good info..thanks for posting
_________________
Backup files BEFORE altering
Use PHPNuke 7.6 with patches!!
No private messages please, POST in forums.
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum
