Databases
StackOverflow2013
Postsdbo
PO.htaccess setenvif referer blocking IE6/7/8, working with IE9/FF/Chrome/Safari?
 

Note that there are some explanatory texts on larger screens.

plurals
  1. PO.htaccess setenvif referer blocking IE6/7/8, working with IE9/FF/Chrome/Safari?
    primarykey
    data
    text
    <p>I have a frustrating issue where I'm restricting traffic to a web application I've built using a simple SetEnvIf Referer method in htaccess, and htaccess is wrongfully blocking qualified IE6/7/8 traffic from only ONE of the 'allowed' sites.</p> <p>Firefox, Chrome, Safari, and IE9 have no problem getting in.</p> <p>There are domains allowed:</p> <p>1) traffic coming from the same domain as the app</p> <p>2) traffic coming from the website of our customer</p> <p>3) cnn.com *for the sake of testing another 3rd party.</p> <p>For the case of CNN.com, I'm using browser tools to replace the target of a link on-screen with a new target: my web app address.</p> <p>I've found the following:</p> <p>Internal traffic works, per .htaccess rule</p> <p>CNN.com traffic works</p> <p>Traffic coming from the customer's site doesn't work in IE6/7/8 (9: works)</p> <p>I've also built a simple php script that prints the HTTP_REFERER from $_SERVER. I'm using the same browser-tools method of inserting links on 3rd party pages, clicking them, and looking for the results on my test page. I've found:</p> <p>internal traffic reports properly in all browsers</p> <p>cnn.com traffic reports properly in all browsers</p> <p>the 3rd party/customer website is not getting the referrer sent through IE(8). IE9 works.</p> <p>.htaccess:</p> <pre><code>SetEnvIf Referer samedomain\.com intra_site_referral=1 SetEnvIf Referer addressthatdoesntwork\.org intra_site_referral=1 SetEnvIf Referer another3rdpartyaddressthatworks\.org intra_site_referral=1 #SetEnvIfNoCase Referer "^$" intra_site_referral=0 &lt;FilesMatch "\.(html|js|css|jpg)$"&gt; Order Allow,Deny Allow from env=intra_site_referral &lt;/FilesMatch&gt; ErrorDocument 403 /restricted.html </code></pre> <p>My questions:</p> <p>Have I exhausted all possible errors on my end? </p> <p>Can I conclude that something is wrong with the customer's website/server reporting of referrer?</p> <p>Before you tell me htaccess referrer isn't 'safe' and referrers can be faked: This protection method is not critical. It was meant to merely keep the audience of the app limited to internal team and the audience of our customer, to some extent.</p> <p>Thanks for reading..</p>
    singulars
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. PTQuestion
    1. This table or related slice is empty.
    1. USAT Design
    plurals
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. PO
      singulars
      1. PTAnswer
    1. This table or related slice is empty.
    1. COThe directives in your .htaccess file look fine (though you may want to use `SetEnvIfNoCase`), if clicking links from your customer's site isn't including referers, not sure if there's anything you can do on your end.
      singulars
      1. PO.htaccess setenvif referer blocking IE6/7/8, working with IE9/FF/Chrome/Safari?
      1. USJon Lin
    2. COit seems the customers site is reporting referrers, as shown in the other browsers, but that IE is not passing it along, for whatever reason. I'll try the setenvifnocase
      singulars
      1. PO.htaccess setenvif referer blocking IE6/7/8, working with IE9/FF/Chrome/Safari?
      1. USAT Design
    3. COsame result with SetEvIfNoCase :/ but thanks!
      singulars
      1. PO.htaccess setenvif referer blocking IE6/7/8, working with IE9/FF/Chrome/Safari?
      1. USAT Design
 

Querying!

 
Guidance
A row detail

Detail views are divided into sections. All the information in the data section comes from columns in the selected row. The other sections display data from other, related rows.

Related data can be related in a to-one or a to-many fashion. Captions of data related in a to-many fashion link to a list view showing a filtered view of the table.

Try moving around until you find a non-empty to-many entry and click on the label to get to one. You can move back to the root by clicking on the database name in the header.

SQuiL has stopped working due to an internal error.

If you are curious you may find further information in the browser console, which is accessible through the devtools (F12).

Reload