[TYPO3-core] RFC Bug #10451: Evaluation PATH_INFO in tslib_fe::checkAlternativeIdMethods() sets false positives

Steffen Kamper info at sk-typo3.de
Mon Feb 16 20:07:15 CET 2009


Hi olly,

Steffen Kamper schrieb:
> Hi olly,
> 
> Oliver Hader schrieb:
>> This is an SVN patch request.
>>
>> Type: Bugfix
>>
>> Bugtracker references:
>> http://bugs.typo3.org/view.php?id=10451
>>
>> Branch: TYPO3_4-2
>>
>> Problem:
>> The method tslib_fe::checkAlternativeIdMethods() in TSFE tries to fetch
>> the server environment PATH_INFO and if there's something it expects an
>> URL like "/index.php/<page-id>/<type-number>/" and sets the current id
>> and type accordant.
>>
>> However, if config.simulateStaticDocuments is not set to "PATH_INFO"
>> this is a false positive.
>>
>> Solution:
>> Check whether config.simulateStaticDocuments is set to "PATH_INFO" and
>> only then try to evaluate the id and type by the PATH_INFO information.
>>
>>
>> olly
>>
> 
> it's even worse: you can enter anything you want like
> this_is_not_the_title_i_expected.37.0.html
> and it will display page 37.
> 
> This is very bad, let's say an editor renames a page - it will never be 
> in google index, as the old url is still available.
> 
> I made an extension which verifies page title so URL "has" to be unique.
> 
> vg Steffen

sry for the additional remark. Sure, your patch is needed and an 
important bugfix.
+1 by reading!

Anyway simulateStatics has to be enhanced to be used in productive setups.

vg Steffen


More information about the TYPO3-team-core mailing list