[TYPO3-core] RFC: allow access from private nets
Martin Kutschker
Martin.Kutschker at blackbox.net
Thu Apr 20 10:48:27 CEST 2006
The code in typo3/install/index.php checks if the access comes from localhost (127.0.0.1) or from the private net class C (192.168.0.0).
But it prevents access from private nets of class A (10.0.0.0) or B (172.16.0.0).
See http://www.faqs.org/rfcs/rfc1918.html.
BT: http://bugs.typo3.org/view.php?id=3161
Solution add this to the check:
substr($_SERVER['REMOTE_ADDR'],0,3)!='10.' && substr($_SERVER['REMOTE_ADDR'],0,7)!='172.16.'
I think there are other checks for 192.168.* which should be changed accordingly.
Masi
More information about the TYPO3-team-core
mailing list