Package: wordpress
Version: 2.2.1-1
Severity: normal
Tags: patch

When accessing wordpress via

        http://host:80/

the debianized version of wp-config.php breaks because it is trying to
find a file called

        config-host:80.php

Since RFC2616 allows ports inside the Host: header (Section 14.23):

        Host = "Host" ":" host [ ":" port ] ; Section 3.2.2

I changed my wp-config.php to this:

        <?php

        $server = preg_replace('/:.*/', "", $_SERVER['HTTP_HOST']);
        $file = '/etc/wordpress/config-'.strtolower($server).'.php';

        if (!file_exists($file)) {
                header("HTTP/1.0 404 Not Found");
                echo "404 Not found"
        }

        require_once($file);

        define('ABSPATH', '/usr/share/wordpress/');

        require_once(ABSPATH.'wp-settings.php');
        ?>


Two changes here:

a) strip of the :port part from HTTP_POST
b) return 404 in case of error

The old version would return a 200 which does hide the problem and lead
to me looking for an error where non was (precicesly the snoopy http
client :).

Be advised that the current sytem used to report this bug is stable with
a wordpress package from unstable. I can reproduce the problem on
unstable though.

regards
        Stefan

-- System Information:
Debian Release: 4.0
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.18-4-xen-686
Locale: [EMAIL PROTECTED], [EMAIL PROTECTED] (charmap=ISO-8859-15)

Versions of packages wordpress depends on:
ii  apache2                  2.2.3-4         Next generation, scalable, extenda
ii  apache2-mpm-prefork [htt 2.2.3-4         Traditional model for Apache HTTPD
ii  libapache2-mod-php4      6:4.4.4-8+etch4 server-side, HTML-embedded scripti
ii  libphp-phpmailer         1.73-2etch1     full featured email transfer class
ii  mysql-client-5.0 [virtua 5.0.32-7etch1   mysql database client binaries
ii  php4                     6:4.4.4-8+etch4 server-side, HTML-embedded scripti
ii  php4-mysql               6:4.4.4-8+etch4 MySQL module for php4

wordpress recommends no packages.

-- no debconf information


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to