Download & Extend

Private folder incorrectly reported as accessible for https host

Project:Private Upload
Version:6.x-1.0-rc3
Component:Code
Category:bug report
Priority:major
Assigned:Unassigned
Status:needs review
Issue tags:ssl

Issue Summary

We have a server that has ssl forced - e.g., any requests for http://our.server.edu/ are automatically redirected to https://our.server.edu/. That creates a problem with the security checking code, as it tries to open a socket to port 80 on the same server, receives a 302, and concludes that the file is accessible. I'm attaching a patch to fix this issue...

thanks,

Adrian

AttachmentSize
private_upload.module.fsockopen.patch866 bytes

Comments

#1

Thank you for the patch!! Works great!

#2

Version:5.x-1.0-rc2» 6.x-1.0-rc3
Priority:normal» major

I am unable to download private files in Internet Explorer on pages secured via SSL. I tried to implement this patch (I acknowledge it is for an earlier version) but it does not seem to help.

#3

Can this patch get committed or a fix for the https issue? Thanks.

nobody click here