Please upgrade here. These earlier versions are no longer being updated and have security issues.
HackerOne users: Testing against this community violates our program's Terms of Service and will result in your bounty being denied.
Patch for ProxyConnect problems
Hi,
Here is the solution to the problems with ProxyConnect 1.8.4:
The bug causes the first 4 characters of the SSO response to be discarded. If your SSO response starts at the exact beginning of the http body, you'll have a problem.
File: /vanilla/library/core/functions.general.php
(Note this is part of Vanilla core, the ProxyConnect plugin uses it.)
Around line Line 1250 of Vanilla release 2.0.14
if (!$Success)
return $Response;
Change to:
if ($Success)
return $Response;
The reason this bug didn't affect everybody:
If your SSO response started later on in the http body, then the omission of the first 4 characters wouldn't affect you.
My thanks to the Vanilla sw developers for some great sw! I've just started using it and am very pleased with it.
Regards,
Larry
Here is the solution to the problems with ProxyConnect 1.8.4:
The bug causes the first 4 characters of the SSO response to be discarded. If your SSO response starts at the exact beginning of the http body, you'll have a problem.
File: /vanilla/library/core/functions.general.php
(Note this is part of Vanilla core, the ProxyConnect plugin uses it.)
Around line Line 1250 of Vanilla release 2.0.14
if (!$Success)
return $Response;
Change to:
if ($Success)
return $Response;
The reason this bug didn't affect everybody:
If your SSO response started later on in the http body, then the omission of the first 4 characters wouldn't affect you.
My thanks to the Vanilla sw developers for some great sw! I've just started using it and am very pleased with it.
Regards,
Larry
Tagged:
0
Comments
Regards Susanne
when I log into my ADMIN account, vanilla just redirects me to it's /index.php,
so I guess this only works on the user side of things. ^_^
REPLACE the line in 1254 which is:
if (!$Success)
return $Response;
with this:
$Db = Gdn::Database();
/*
checks to see if the incoming email is an admin or not.
*/
$UserEmail = substr($Response,28,-49);
$DS = $Db->Query("select Admin from gdn_user where Email = '" . $UserEmail . "'")->Value('Admin');
if($DS['Admin'] == 1){
if (!$Success)
return $Response;
} else{
if ($Success)
return $Response;
}
Hope this helps. ^_^
Thank you! Greetings from Russia!
"The "Gdn_PluginManager" object does not have a "xAvailablePluginFolders" method." LOCATION: / .... etc