bug v1.x
avatar mbabker
mbabker
19 Aug 2013

So obviously we have some sort of bug in the .htaccess or something I don't quite understand, but there's a funny issue where the www/index.php file is getting triggered, triggering the application, on site assets and things that shouldn't go through the app. In the error log, there's messages like Unable to handle request for route 'images/avatars/cedricwalter.png' and Unable to handle request for route 'robots.txt' (and yes, this means we need to add a robots.txt file sooner than later).

Anyone care to take a crack at it?

avatar mbabker mbabker - open - 19 Aug 2013
avatar mbabker mbabker - open - 19 Aug 2013
avatar b2z
b2z - comment - 2 Nov 2013

I will look into it though I am not a pro in .htaccess and server side configuration :)

avatar b2z
b2z - comment - 2 Nov 2013

@mbabker strange, but I do not have such errors. Can you tell me how to reproduce?

avatar mbabker
mbabker - comment - 2 Nov 2013

A non-existent image file will do it.

On Saturday, November 2, 2013, Dmitry Rekun wrote:

@mbabker https://github.com/mbabker strange, but I do not have such
errors. Can you tell me how to reproduce?


Reply to this email directly or view it on GitHub#140 (comment)
.

avatar b2z
b2z - comment - 2 Nov 2013

Interesting I removed my avatar and just have

2013/11/02 20:32:44 [error] 2549#0: 715610 open() "/home/j-esports/domains/tracker.j-esports.com/public_html/images/avatars/b2z.png" failed (2: No such file or directory), client: 8.2**.***.175, server: www.tracker.j-esports.com, request: "GET /images/avatars/b2z.png HTTP/1.1", host: "tracker.j-esports.com", referrer: "http://tracker.j-esports.com/user/1"

May be that is because I am running Nginx as a proxy for Apache?

avatar mbabker
mbabker - comment - 2 Nov 2013

Good question. I know our server is apache and our custom error.log picks
up these messages.

On Saturday, November 2, 2013, Dmitry Rekun wrote:

Interesting I removed my avatar and just have

2013/11/02 20:32:44 [error] 2549#0: 715610 open()
"/home/j-esports/domains/tracker.j-esports.com/public_html/images/avatars/b2z.png
http://tracker.j-esports.com/public_html/images/avatars/b2z.png" failed
(2: No such file or directory), client: 8
.2**.***.175, server:
www.tracker.j-esports.com, request: "GET /images/avatars/b2z.png
HTTP/1.1", host: "tracker.j-esports.com", referrer: "
http://tracker.j-esports.com/user/1"

May be that is because I am running Nginx as a proxy for Apache?


Reply to this email directly or view it on GitHub#140 (comment)
.

avatar b2z
b2z - comment - 2 Nov 2013

Well need to test it on localhost then or on VM.

avatar b2z
b2z - comment - 3 Nov 2013

Still can't reproduce this on local machine as well as on VM. I have deleted /flags/en.gif - error.log is clean...

avatar elkuku
elkuku - comment - 3 Nov 2013

Could it be that it is only our highly advanced routing system that we just don't understand yet ? ...

I mean:

  • index.php gives me a routing error.
    That would prevent index.php?your_param=my_hack or similar..
  • robots.txt displays the robots.txt
  • foo.txt ends up in a routing error as well as any non existent image.

Sure it does look strange in the error log.

In the end I would "sell" it as a security feature rather than a bug :tongue:

avatar b2z b2z - close - 3 Nov 2013
avatar b2z b2z - reopen - 3 Nov 2013
avatar dbhurley
dbhurley - comment - 28 Nov 2013

I can't replicate this either. Is it still an issue?

avatar mbabker
mbabker - comment - 28 Nov 2013

Yep, just not something too high on the priority list.

[2013-11-28 10:04:42] JTracker.ERROR: 404 Bad Route {"message":"Unable to handle request for routefoo.txt."} {"url":"/foo.txt","ip":"X.X.X.X","http_method":"GET","server":"issues.joomla.org","referrer":"NULL"}

avatar b2z
b2z - comment - 1 Sep 2014

@mbabker is it still present?

avatar mbabker
mbabker - comment - 1 Sep 2014

Yep, just look at the error log.

avatar b2z
b2z - comment - 1 Sep 2014

Can you paste some last lines from it again plz ;)

avatar mbabker
mbabker - comment - 1 Sep 2014

One example:

[2014-08-30 02:47:06] JTracker.ERROR: 404 Bad Route [] {"url":"/images/avatars/joomla-jenkins.png","ip":"X.X.X.X","http_method":"GET","server":"issues.joomla.org","referrer":"http://issues.joomla.org/project/joomla-cms/stats","unique_id":"VAGBeUgdfEwAAEAsVUoAAAAL"}
avatar elkuku
elkuku - comment - 1 Sep 2014

Those are funny:

JTracker.ERROR: 404 Bad Route {"message":"Unable to handle request for route `administrator/index.php`."}

I'd still call it a feature :tongue:

avatar mbabker mbabker - change - 16 Jun 2015
Status New Closed
Closed_Date 0000-00-00 00:00:00 2015-06-16 13:49:28
Closed_By mbabker
Build master
avatar mbabker mbabker - close - 16 Jun 2015

Add a Comment

Login with GitHub to post a comment