Uploaded image for project: 'phpBB3'
  1. phpBB3
  2. PHPBB3-14481

phpBB does not obey HTTP_X_FORWARDED_PORT header

    XMLWordPrintable

Details

    Description

      When PhpBB is hosted behind a SSL offloading Proxy $server_port from common.php does not take header HTTP_X_FORWARDED_PORT into account...

      The same problem appear with OAuth /public/vendor/lusitanian/oauth/src/OAuth/Common/Http/Uri/UriFactory.php with function detectPort

      This can be observed when hosting PhpBB using Red Hat OpenShift (There is a Free Trial for Testing...)

      The Apache advertised SERVER_PORT value is always 80 when hosted behind OpenShift Reverse Proxy even when using HTTPS over port 443 (SSL being deciphered before reaching the VMs)

      This prevent OAuth from working correctly... (it tries to append port 80 to redirect URI in https...)

      Attachments

        Issue Links

          Activity

            People

              Marc Marc
              Leodagan Leodagan [X] (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: