[TYPO3-core] RFC #11778: Bug: parse_url error

Johannes Feustel j at feustel.eu
Mon Aug 24 17:23:17 CEST 2009


Hi,
this is a SVN patch request.

Type: Bugfix

Bugtracker references:

http://bugs.typo3.org/view.php?id=11778

Branches: TYPO3_4-2

Problem:
Sometimes error messages like "Unable to parse URL" occures in logfile. 
This is because tslib_fe->checkAlternativeIdMethods() calls 
parse_url($this->siteScript). This works in most cases, but not if wrong 
urls with // like http://domain.tld//path are requested. Found this 
caused by scripts searching for security vulnerabilities.

Solution:
The simple solution is to add TYPO3_SITE_URL to make sure parse_url() 
gets a valid url.


Notes:
This part changed in 4.3 so this problem is not in trunk.

Regards,
Johannes


More information about the TYPO3-team-core mailing list