Forums / Install & configuration / strange behaviour when redirected from masked (or gripped) url

strange behaviour when redirected from masked (or gripped) url

Author Message

nigel dodd

Tuesday 12 April 2005 8:23:57 am

My domain is parked with Freeparking who allow me to forward to my own isp. When this happens the Address window of the browser gives my domain name (as parked with Freeparking), not the real isp address.

Furthermore, my static home page on the isp has links to Apache running on my home pc (broadband but changeable ip address, hence the homepage on the isp whose links are periodically updated to track the changing ip address).

When the user clicks any of the links on the homepage he gets directed to my home pc. The browser still says the original domain name registered with Freeparking, not the raw ip address of my home pc. At this stage the user is in the dynamic, easyPublish-driven cms.

Now everything appears to work fine except when the user logs in. Normally (and this is what you get if you go directly to the home pc using the raw ip address or localhost) the Login word changes to Logout after you login. Also, I have got roles and permissions set so that the logged-in user sees extra menu entries compared to the anonymous user. Neither of these two things happen when you get to my site through the convoluted route of Freeparking -> isp -> hope pc, although the user is definitely logged in (one of the pages lists all logged in users and he appears there).

I think the problem has to do with this masking or gripping of the url done by Freeparking but I don't know how to work around the problem.

nigel dodd

Monday 18 April 2005 2:51:47 am

thought I'd post the conclusion to this original posting by myself!

The problem was due to cookies and Internet Explorer's default settings which seem to reject what it calls Third party cookies. To demonstrate this it is possible to allow such cookies by fiddling with the IE Options and then the login process works correctly.

The reason these are Third-party is because the browser has the gripped url in its address bar but the site issuing the cookie is my own computer with different ip address.

I have worked around the problem by defeating Freeparking's gripping of the url.

I am puzzled by a previous post http://www.ez.no/ez_publish/info/ez_publish_2_2/forum/general/cookieless_sessions_do_not_appear_to_work which says that ezPublish logins work without cookies if you set $UsePHPSessions = true in index.php but unfortunately this is for version 2.1 and there is no mention of $UsePHPSessions in the version 3.4 index.php. Has this setting been changed?

Bård Farstad

Wednesday 20 April 2005 12:55:18 am

Nigel,

glad that you found the reason for your problem.

eZ publish 3.x does not support cookie less sessions since they are very un-secure. Since Apache logs referrer URL's it is very easy to hijack sessions stored as part of the URL, specially when linking out from a website as they will be stored in the log file on the remote server as well.

You should also always disable transparent session id's in your PHP configuration. For the same reasons.

--bård

--bård

Documentation: http://ez.no/doc

eZ debug

Timing: Jan 18 2025 04:26:37
Script start
Timing: Jan 18 2025 04:26:37
Module start 'content'
Timing: Jan 18 2025 04:26:38
Module end 'content'
Timing: Jan 18 2025 04:26:38
Script end

Main resources:

Total runtime0.7441 sec
Peak memory usage4,096.0000 KB
Database Queries194

Timing points:

CheckpointStart (sec)Duration (sec)Memory at start (KB)Memory used (KB)
Script start 0.00000.0052 589.2031180.7891
Module start 'content' 0.00520.6168 769.9922550.7109
Module end 'content' 0.62200.1220 1,320.7031336.7188
Script end 0.7441  1,657.4219 

Time accumulators:

 Accumulator Duration (sec) Duration (%) Count Average (sec)
Ini load
Load cache0.00390.5256210.0002
Check MTime0.00150.2020210.0001
Mysql Total
Database connection0.00060.082910.0006
Mysqli_queries0.678491.17171940.0035
Looping result0.00170.22711920.0000
Template Total0.717596.420.3588
Template load0.00210.286620.0011
Template processing0.715496.135920.3577
Template load and register function0.00010.013410.0001
states
state_id_array0.00080.111410.0008
state_identifier_array0.00070.093320.0003
Override
Cache load0.00180.2402240.0001
Sytem overhead
Fetch class attribute can translate value0.00120.163630.0004
Fetch class attribute name0.00090.115950.0002
XML
Image XML parsing0.00130.173030.0004
class_abstraction
Instantiating content class attribute0.00000.001760.0000
General
dbfile0.00260.3457340.0001
String conversion0.00000.000630.0000
Note: percentages do not add up to 100% because some accumulators overlap

CSS/JS files loaded with "ezjscPacker" during request:

CacheTypePacklevelSourceFiles
CSS0extension/community/design/community/stylesheets/ext/jquery.autocomplete.css
extension/community_design/design/suncana/stylesheets/scrollbars.css
extension/community_design/design/suncana/stylesheets/tabs.css
extension/community_design/design/suncana/stylesheets/roadmap.css
extension/community_design/design/suncana/stylesheets/content.css
extension/community_design/design/suncana/stylesheets/star-rating.css
extension/community_design/design/suncana/stylesheets/syntax_and_custom_tags.css
extension/community_design/design/suncana/stylesheets/buttons.css
extension/community_design/design/suncana/stylesheets/tweetbox.css
extension/community_design/design/suncana/stylesheets/jquery.fancybox-1.3.4.css
extension/bcsmoothgallery/design/standard/stylesheets/magnific-popup.css
extension/sevenx/design/simple/stylesheets/star_rating.css
extension/sevenx/design/simple/stylesheets/libs/fontawesome/css/all.min.css
extension/sevenx/design/simple/stylesheets/main.v02.css
extension/sevenx/design/simple/stylesheets/main.v02.res.css
JS0extension/ezjscore/design/standard/lib/yui/3.17.2/build/yui/yui-min.js
extension/ezjscore/design/standard/javascript/jquery-3.7.0.min.js
extension/community_design/design/suncana/javascript/jquery.ui.core.min.js
extension/community_design/design/suncana/javascript/jquery.ui.widget.min.js
extension/community_design/design/suncana/javascript/jquery.easing.1.3.js
extension/community_design/design/suncana/javascript/jquery.ui.tabs.js
extension/community_design/design/suncana/javascript/jquery.hoverIntent.min.js
extension/community_design/design/suncana/javascript/jquery.popmenu.js
extension/community_design/design/suncana/javascript/jScrollPane.js
extension/community_design/design/suncana/javascript/jquery.mousewheel.js
extension/community_design/design/suncana/javascript/jquery.cycle.all.js
extension/sevenx/design/simple/javascript/jquery.scrollTo.js
extension/community_design/design/suncana/javascript/jquery.cookie.js
extension/community_design/design/suncana/javascript/ezstarrating_jquery.js
extension/community_design/design/suncana/javascript/jquery.initboxes.js
extension/community_design/design/suncana/javascript/app.js
extension/community_design/design/suncana/javascript/twitterwidget.js
extension/community_design/design/suncana/javascript/community.js
extension/community_design/design/suncana/javascript/roadmap.js
extension/community_design/design/suncana/javascript/ez.js
extension/community_design/design/suncana/javascript/ezshareevents.js
extension/sevenx/design/simple/javascript/main.js

Templates used to render the page:

UsageRequested templateTemplateTemplate loadedEditOverride
1node/view/full.tplfull/forum_topic.tplextension/sevenx/design/simple/override/templates/full/forum_topic.tplEdit templateOverride template
3content/datatype/view/ezimage.tpl<No override>extension/sevenx/design/simple/templates/content/datatype/view/ezimage.tplEdit templateOverride template
3content/datatype/view/ezxmltext.tpl<No override>extension/community_design/design/suncana/templates/content/datatype/view/ezxmltext.tplEdit templateOverride template
3content/datatype/view/ezxmltags/paragraph.tpl<No override>extension/ezwebin/design/ezwebin/templates/content/datatype/view/ezxmltags/paragraph.tplEdit templateOverride template
1pagelayout.tpl<No override>extension/sevenx/design/simple/templates/pagelayout.tplEdit templateOverride template
 Number of times templates used: 11
 Number of unique templates used: 5

Time used to render debug report: 0.0001 secs