Trusted Host statt Trusted IP Link LogIn #549
-
|
Hallo, wir bereiten derzeit die Nutzung des Link LogIns vor und wollen dabei auf die TrustedIP Option zurückgreifen. Vielen Dank. |
Beta Was this translation helpful? Give feedback.
Replies: 6 comments
-
|
Sorry for late answer, I will try to check it next week |
Beta Was this translation helpful? Give feedback.
-
|
This should work now with version 2.18.4 |
Beta Was this translation helpful? Give feedback.
-
|
@trendschau first of - thanks a lot. Did try it right a way - but for different reasons, I could not dig into it right away. Unfortunately I can't get this working. Maybe you have an idea.
Then we linked the Guest-User-Loginlink from the right site, to receive the necessary referrer. But we end up on the login screen. Do you have an idea, what we are doing wrong? Thanks. |
Beta Was this translation helpful? Give feedback.
-
|
Ah, ok, good information, I have to check if something with the trusted host logic breaks the login logic. If I find something, I can add it to the hotfix release for next week. |
Beta Was this translation helpful? Give feedback.
-
|
Please try again with Hotfix 2.19.1, I refactored the logic a bit and also added a more detailed security reporting. You can activate the security reports temporarely and then check if there is an entry when it fails again. I tested the feature again on my servers without any problems, but I cannot test certain szenarios like proxies easily. It is also possible that servers do not send the required infos, the logic uses $_SERVER['HTTP_X_FORWARDED_FOR'], $_SERVER['REMOTE_ADDR'], and $_SERVER['HTTP_REFERER'] for checks. |
Beta Was this translation helpful? Give feedback.
-
|
This is working perfectly. |
Beta Was this translation helpful? Give feedback.
Please try again with Hotfix 2.19.1, I refactored the logic a bit and also added a more detailed security reporting. You can activate the security reports temporarely and then check if there is an entry when it fails again. I tested the feature again on my servers without any problems, but I cannot test certain szenarios like proxies easily. It is also possible that servers do not send the required infos, the logic uses $_SERVER['HTTP_X_FORWARDED_FOR'], $_SERVER['REMOTE_ADDR'], and $_SERVER['HTTP_REFERER'] for checks.