Menu

Security, logout questions

Help
2004-01-02
2004-01-06
  • Brian Koontz

    Brian Koontz - 2004-01-02

    Two quick questions:

    1. When I click the "Logout" link, I'm taken to the phpGedView page rather than where I might expect, like my own site's login page.  Is there a config var I forgot to set to take logout requests back to the hosting site?

    2.  I had to reboot my host server, and forgot to restart MySQL.  When I logged into phpGedView, it took me to the editconfig.php page without any sort of authorization.  Is there a way to "failsafe" this so requests are redirected to a safe page?

     
    • Phantomas

      Phantomas - 2004-01-02

      To 1:

      Are you using REQUIRE_AUTHENTICATION for every visitor?

       
      • Brian Koontz

        Brian Koontz - 2004-01-02

        Yes, I am requiring authentication for all users.

         
    • Jason Hicks

      Jason Hicks - 2004-01-02

      I saw a thread recently about adding a trailing slash to the $HOME_SITE_URL varaible... or something like that. 

      That variable is what needs to be set to fix #1 - its in the index/yourgedfile_conf.php (or it can be set in the Admin -> Configure Gedcoms -> Edit (yourged)

      however the trailing "/" fix (included in 2.65b3) isn't great if you're redirecting to a html or php file (instead of a root web directory)... any non-specific links from that referenced page now fail.  (i.e. you'll be pointed at soemthing like http://website.com/webpage.html/link.html\)

      Jason

       
    • John Finlay

      John Finlay - 2004-01-06

      Regarding #2: I cannot require authentication if the database is down because the user data is stored in the database so there is nothing to authenticate against.

      --John

       

Log in to post a comment.