[TYPO3-core] RFC: allow access from private nets

Martin Kutschker Martin.Kutschker at blackbox.net
Thu Apr 20 10:48:27 CEST 2006


The code in typo3/install/index.php checks if the access comes from localhost (127.0.0.1) or from the private net class C (192.168.0.0).

But it prevents access from private nets of class A (10.0.0.0) or B (172.16.0.0).

See http://www.faqs.org/rfcs/rfc1918.html.

BT: http://bugs.typo3.org/view.php?id=3161

Solution add this to the check:

substr($_SERVER['REMOTE_ADDR'],0,3)!='10.' && substr($_SERVER['REMOTE_ADDR'],0,7)!='172.16.'

I think there are other checks for 192.168.* which should be changed accordingly.

Masi 



More information about the TYPO3-team-core mailing list