View Issue Details

IDProjectCategoryView StatusLast Update
6174Composrcore_cnspublic2025-03-15 03:28
ReporterPDStig Assigned ToPDStig  
PriorityhighSeverityminor 
Status resolvedResolutionfixed 
Product Version11.beta7 
Summary6174: Apache syntax not being used for two-factor maintenance script protection
DescriptionWe are not properly expanding wildcard IP addresses to Apache format for the maintenance script IP protection. This hotfix fixes that.
TagsNo tags attached.
Attach Tags
Attached Files
Time estimation (hours)
Sponsorship open

Sponsor

Date Added Member Amount Sponsored

Activities

admin

2025-03-15 03:28

administrator   ~9877

Fixed in Git commit 42640a593fca72dbb5995071dbd20876728912e9 (https://gitlab.com/composr-foundation/composr/commit/42640a593fca72dbb5995071dbd20876728912e9 - link will become active once code pushed to GitLab)

admin

2025-03-15 03:28

administrator   ~9878

A hotfix (a TAR of files to upload) has been uploaded to this issue. Only apply this hotfix if you absolutely need it and cannot wait until the next release of Composr (releases are more reliable and strictly tested). As of Composr version 11, the recommended way to apply a hotfix is by following the same steps as an upgrade (https://baseurl/upgrader.php, use the hotfix on the step “Transfer across new/updated files”). The upgrader will automatically skip files belonging to addons you do not have installed or that are newer on disk than in the hotfix. Otherwise, you can manually extract and replace these files (do not replace if your on-disk file is newer than the one in the hotfix). Always take backups of your site or at least files you are replacing before applying a hotfix. Not sure how to extract TAR files to your Windows computer? Try 7-zip (http://www.7-zip.org/).

Issue History

Date Modified Username Field Change