[TYPO3-core] RFC: allow access from private nets

Martin Kutschker Martin.Kutschker at n0spam-blackbox.net
Wed Jun 21 12:56:28 CEST 2006


Karsten Dambekalns schrieb:
> Hi.
> 
> On Thursday 20 April 2006 10:48, Martin Kutschker wrote:
> 
>>The code in typo3/install/index.php checks if the access comes from
>>localhost (127.0.0.1) or from the private net class C (192.168.0.0).
> 
>  ...
> 
>>Solution add this to the check:
>>
>>substr($_SERVER['REMOTE_ADDR'],0,3)!='10.' &&
>>substr($_SERVER['REMOTE_ADDR'],0,7)!='172.16.'
> 
> 
> And what about IPv6? This is true for other places as well. Ah, life was 
> better in the old days...

Michael made goode suggestions: in the installer use the file check and in 
other parts (eg debug IPs) use only 127.0.0.1 *and* ::1.

Masi



More information about the TYPO3-team-core mailing list