1
kolleyk
The Firewall blocking referrers problem - revisited
  • 2004/1/18 22:23

  • kolleyk

  • Just popping in

  • Posts: 5

  • Since: 2003/6/6 1


Hello,
First can I want to say a big thank you to all the XOOPS developers out there. It's no exaggeration to say it has truly improved my working life!

Having been a hit a few times by the Norton and friends firewall blocking referrers and disallowing registrations problem. I decided to add an emailadmin function to the insertUser call in the register.php file to see how many times my users are getting this problem.

Background: I'm running a popular local non tech site for some friends in a very non tech city. So although there is a client side workaround available on this XOOPS site, it's not much use as these people don't take kindly to being told to reconfigure their firewalls!

I started seeing the problem in September and since then the problem has gradually ramped up to nearly one in every two attempts to register today.

I have changed the error message to let the people know what to do and offered a telephone number, but generally people just leave the site.

I was wondering if anybody out there had a server side work around for this problem. I can only see it getting more prevalent as people purchase new machines with copies of NIS 2004 installed.

I am going to continue to look into the problem myself, but it seems the use of referrers is throughout Xoops...

I'm really posting this entry to see if anybody else has attempted to tackle this problem..

Please let us know!

Thanks

Kolley.

2
PTlooker
Re: The Firewall blocking referrers problem - revisited
  • 2004/1/18 22:36

  • PTlooker

  • Just can't stay away

  • Posts: 447

  • Since: 2003/6/15


I have the same problem...people with firewall turn on cant register or send news...

3
Mithrandir
Re: The Firewall blocking referrers problem - revisited

It is of course possible to hack XOOPS to not check the HTTP referrer, if that is what you really want...

4
PTlooker
Re: The Firewall blocking referrers problem - revisited
  • 2004/1/18 22:47

  • PTlooker

  • Just can't stay away

  • Posts: 447

  • Since: 2003/6/15


But how?

5
Mithrandir
Re: The Firewall blocking referrers problem - revisited

include/common.php

Comment out lines 61-63 and 65, so they look like this:
/*
if (!defined('XOOPS_XMLRPC')) {
    define('XOOPS_DB_CHKREF', 1);
} else {
*/
    
define('XOOPS_DB_CHKREF'0);
//}

6
PTlooker
Re: The Firewall blocking referrers problem - revisited
  • 2004/1/18 23:05

  • PTlooker

  • Just can't stay away

  • Posts: 447

  • Since: 2003/6/15


Will this bring any kind of problem in the future?

7
kolleyk
Re: The Firewall blocking referrers problem - revisited
  • 2004/1/18 23:22

  • kolleyk

  • Just popping in

  • Posts: 5

  • Since: 2003/6/6 1


Thanks for your quick reply.

Is it really that simple??

What would we lose by losing the ability to use referrers?

8
spiff
Re: The Firewall blocking referrers problem - revisited
  • 2004/3/11 17:18

  • spiff

  • Just popping in

  • Posts: 47

  • Since: 2003/4/16


Blocking the referrers makes your site prone to Cross-Site Scripting attacks, as mentioned in this thread.
Just posted on coming to a more descriptive error message on the same HTTP_REFERER blocking issue in this thead.
Eric

Login

Who's Online

252 user(s) are online (134 user(s) are browsing Support Forums)


Members: 0


Guests: 252


more...

Donat-O-Meter

Stats
Goal: $100.00
Due Date: Mar 31
Gross Amount: $0.00
Net Balance: $0.00
Left to go: $100.00
Make donations with PayPal!

Latest GitHub Commits