Anonymous Login
2019-11-15 04:13 PST

View Issue Details Jump to Notes ]
IDProjectCategoryView StatusLast Update
0001186Pending RequestsCore Infrastructurepublic2014-07-03 17:04
Reporterlaussetdelon 
Assigned To 
PrioritynormalSeveritymajorReproducibilityalways
StatusnewResolutionopen 
Product Version 
Target VersionFixed in Version 
Summary0001186: Web2project through reverse proxy (3.0 pre)
DescriptionAs many of my sites, I tried to put Web2project throught a reverse proxy.
Following this :
<VirtualHost>
ProxyPreserveHost On
ProxyPass / http://192.168.0.91/project/
ProxyPassReverse / http://192.168.0.91/project/
ServerName project.mydomain.tld
CustomLog /var/log/apache2/access-project.log combined
</VirtualHost>

All the other sites are OK, not web2project. I succeed to get into home page after authentification but any action from there is bringing me back to authentification page.
Do you have a clue ?

Thnak you
TagsNo tags attached.
Attached Files
  • ? file icon security.php (146 bytes) 1969-12-31 16:00
  • patch file icon base.php.patch (864 bytes) 1969-12-31 16:00 -
    53,55c53,67
    < $baseUrl = (isset($_SERVER['HTTPS']) && $_SERVER['HTTPS'] != 'off') ? 'https://' :
    <     'http://';
    < $baseUrl .= safe_get_env('HTTP_HOST');
    ---
    > if (isset($_SERVER['HTTP_X_FORWARDED_PROTO']) && isset($_SERVER['HTTP_X_FORWARDED_HOST'])) {
    > 	$baseUrl=$_SERVER['HTTP_X_FORWARDED_PROTO'] . '://' . $_SERVER['HTTP_X_FORWARDED_HOST'];
    > 	
    > 	require_once($baseDir . '/includes/security.php');
    > 	if (!isset($w2Psecurity['X-Forwarded-URL'])) {
    > 		$baseUrl='';
    > 	} else if (strcmp($baseUrl,$w2Psecurity['X-Forwarded-URL']) != 0) {
    > 		$baseUrl='';
    > 	} 
    > }
    > if (strlen($baseUrl) === 0) {
    > 	$baseUrl = (isset($_SERVER['HTTPS']) && $_SERVER['HTTPS'] != 'off') ? 'https://' :
    > 	    'http://';
    > 	$baseUrl .= safe_get_env('HTTP_HOST');
    > }
    61d72
    < 
    131c142
    < define('QUERY_STYLE_NUM', 1);
    \ No newline at end of file
    ---
    > define('QUERY_STYLE_NUM', 1);
    
    patch file icon base.php.patch (864 bytes) 1969-12-31 16:00 +

-Relationships
duplicate of 0000566closedcaseydk Reverse Proxy Handling 
+Relationships

-Notes

~0003032

jmfg1973 (reporter)

Last edited: 2013-11-21 12:00

My solution:

My proxy configuration:

<Location /project>
        ProxyPreserveHost On
        # necessary only if protocol change
        RequestHeader set X-Forwarded-Proto "https" early
        ProxyPass / http://[internal ip]/[internal direcotry]/
        ProxyPassReverse / http://[internal ip]/[internal direcotry]/
</Location>

Following code changes:
add file include/security.php

<?php

global $w2Psecurity;

// external host include protocol
$w2Psecurity['X-Forwarded-URL'] = 'https://web2project.example.com';

?>

patched base.php
53,55c53,67
< $baseUrl = (isset($_SERVER['HTTPS']) && $_SERVER['HTTPS'] != 'off') ? 'https://' :
< 'http://';
< $baseUrl .= safe_get_env('HTTP_HOST');
---
> if (isset($_SERVER['HTTP_X_FORWARDED_PROTO']) && isset($_SERVER['HTTP_X_FORWARDED_HOST'])) {
> $baseUrl=$_SERVER['HTTP_X_FORWARDED_PROTO'] . '://' . $_SERVER['HTTP_X_FORWARDED_HOST'];
>
> require_once($baseDir . '/includes/security.php');
> if (!isset($w2Psecurity['X-Forwarded-URL'])) {
> $baseUrl='';
> } else if (strcmp($baseUrl,$w2Psecurity['X-Forwarded-URL']) != 0) {
> $baseUrl='';
> }
> }
> if (strlen($baseUrl) === 0) {
> $baseUrl = (isset($_SERVER['HTTPS']) && $_SERVER['HTTPS'] != 'off') ? 'https://' :
> 'http://';
> $baseUrl .= safe_get_env('HTTP_HOST');
> }
61d72
<
131c142
< define('QUERY_STYLE_NUM', 1);
\ No newline at end of file
---
> define('QUERY_STYLE_NUM', 1);

+Notes

-Issue History
Date Modified Username Field Change
2012-09-26 01:00 laussetdelon New Issue
2012-11-21 21:37 caseydk Project v3.0 Release => Pending Requests
2013-11-21 11:57 jmfg1973 File Added: security.php
2013-11-21 11:58 jmfg1973 Note Added: 0003032
2013-11-21 11:59 jmfg1973 File Added: base.php.patch
2013-11-21 12:00 jmfg1973 Note Edited: 0003032
2014-01-01 16:37 caseydk Summary Web2project throught reverse proxy (3.0 pre) => Web2project through reverse proxy (3.0 pre)
2014-04-05 17:29 caseydk Category General => Core Infrastructure
2014-07-03 17:04 caseydk Relationship added duplicate of 0000566
+Issue History