Uploaded image for project: 'phpBB3'
  1. phpBB3
  2. PHPBB3-14481

phpBB does not obey HTTP_X_FORWARDED_PORT header

    Details

      Description

      When PhpBB is hosted behind a SSL offloading Proxy $server_port from common.php does not take header HTTP_X_FORWARDED_PORT into account...

      The same problem appear with OAuth /public/vendor/lusitanian/oauth/src/OAuth/Common/Http/Uri/UriFactory.php with function detectPort

      This can be observed when hosting PhpBB using Red Hat OpenShift (There is a Free Trial for Testing...)

      The Apache advertised SERVER_PORT value is always 80 when hosted behind OpenShift Reverse Proxy even when using HTTPS over port 443 (SSL being deciphered before reaching the VMs)

      This prevent OAuth from working correctly... (it tries to append port 80 to redirect URI in https...)

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                Marc Marc
                Reporter:
                Leodagan Leodagan [X] (Inactive)
              • Votes:
                0 Vote for this issue
                Watchers:
                3 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: