#3538 (ok 3.5.2) Force SSL redirects to port 80

3.5.0
fixed
1
2014-08-14
2012-03-22
Anonymous
No

If Force SSL for the phpmyadmin server is enabled, after login, users are redirected to port 80 on the secure server.

i.e., login at http://phpmyadmin.\[domain] or https://phpmyadmin.\[domain]

redirects after login to

https://phpmyadmin.\[domain]:80/[rest of path]

This generates an error.

(IMO, this should go to:

https://phpmyadmin.\[domain]/[rest of path]

)

Discussion


  • Anonymous
    2012-03-28

    To Prakul:

    Looking at the function of the environment variables you mention, these are designed to enable SSL connections on port 80, if I read them correctly.

    It is undesirable to access the SSL site on port 80 as this is nonstandard behavior

    This is therefore, not a configuration issue with the Apache server, PHPMYADMIN should not be redirecting to port 80 after login, it should stay on the default port for SSL.

    Again, by removing the :80 on the initial login, we are logged in and working. the SSL site, and the login work correctly, but PHPMYADMIN out of the box tries to redirect to a secure connection on port 80 if ForceSSL is enabled.

     

  • Anonymous
    2012-04-03

    I do not agree that this is an apache configuration issue. Please see my pull request: https://github.com/phpmyadmin/phpmyadmin/pull/13

     
  • Michal Čihař
    Michal Čihař
    2012-04-19

    • assigned_to: nobody --> nijel
     
  • Michal Čihař
    Michal Čihař
    2012-04-19

    Fixed in git (including new tests to cover this).

     
  • Michal Čihař
    Michal Čihař
    2012-04-19

    • summary: Force SSL redirects to port 80 --> (ok 4.0) Force SSL redirects to port 80
    • priority: 5 --> 1
    • status: open --> open-fixed
     

  • Anonymous
    2012-06-19

    • milestone: 2510776 --> 3.5.0
     

  • Anonymous
    2012-06-19

    Would it be possible to fix this for the current, shipping version 3.5.x along with 4.x versions?

     
  • Michal Čihař
    Michal Čihař
    2012-06-20

    Fix backported to 3.5.

     
  • Michal Čihař
    Michal Čihař
    2012-06-20

    • summary: (ok 4.0) Force SSL redirects to port 80 --> (ok 3.5.2) Force SSL redirects to port 80
     
  • Marc Delisle
    Marc Delisle
    2012-07-20

    • status: open-fixed --> closed-fixed
     
  • Michal Čihař
    Michal Čihař
    2013-06-11

    • Status: closed-fixed --> fixed