[TYPO3-dev] Reintroducing config.baseURL = 1

Stig Nørgaard Færch snf at dkm.dk
Wed Sep 28 21:23:26 CEST 2011


Den 28-09-2011 13:02, Steffen Gebert skrev:
> Hi Stig,
>
>> If we understand the security issue correctly, a check if
>> $GLOBALS['TSFE']->domainStartPage is an INT would solve the problem.
>> Then if we understand domainStartPage correctly, baseURL will only be
>> set to TYPO3_SITE_URL if a sys_domain record with that domain exists.
>
> There should be some API to get the domain for a page id. The result of
> this function should be used as base url, regardless of what is in
> HTTP_HOST.

So what should the API return if there is no sys_domain record of the 
incoming domain?


> You can't just trust on the existence of a sys_domain record, as it
> could be not the primary one (but a redirection) and it might even be
> defined for another site.

I don't completely understand what you are saying here.

/Stig




More information about the TYPO3-dev mailing list