WODA: FAQs

 Security (version 4.6.x)

Why are links breaking on HTTPS servers?
I've tracked the problem that I experienced with WODA on the HTTPS server to the mainPathInfo routine.

The problem is that the code asks for the server protocol but in the case of HTTP protocol doesn't test for the presence of HTTPS.

The example below shows the patch that I've applied. This works on the Zeus server that this program is currently installed on. I haven't tested it elsewhere.


sub mainPathInfo {
$RH = $ENV{REMOTE_HOST};
$RA = $ENV{REMOTE_ADDR};
$SN = $ENV{HTTP_HOST} || $ENV{SERVER_NAME};
$ENV{SERVER_PROTOCOL} =~ m|/|;
$p = $` || $ENV{SERVER_PROTOCOL};
$p =~ tr/[A-Z]/[a-z]/;

$p = 'https' if ($ENV{HTTPS} eq 'on' && $p eq 'http'); #### mf #### <-- test for HTTPS

$SCRIPTBASE = $p . '://' . $SN . ':' . $ENV{SERVER_PORT};
$SCRIPTBASE =~ s/\n|\r//g;
$SCRIPTBASE =~ s/:80$//; # remove :80 !
modify the informationdelete entire recordexplain the meaning of the fieldsbrowse recordsAdd a new questionHome page of this databaselogin Valid HTML 4.01 Transitional Valid CSS! Powered by WODA 4.6x trunk