Not a bug name a thread after a php file name

[Adam Howard]

http://xenforo.com/community/threads/admin-php-forbidden.44565/

Title of the thread is

admin.php forbidden

Clicking it redirects you to /admin.php

 

[yavuz]

Realy weird

 

[Adam Howard]

Realy weird

Confirmed or just me?

 

[CTXMedia]

Confirmed (after cancelling the login popup):

 

[MattW]

That's a strange one. I've just tried it on my dev site, and it's not doing it

http://dev.z22se.com/xenforo/threads/admin-php-forbidden.16/

Wonder if it's something in their .htaccess file?

 

[CTXMedia]

Also does it on hover too:

 

[tenants]

Nice find Adam, does it have to be the exact name and is it Windows / Linux specific ?.

It's going to be fairly rare that someone will name a thread like that, but needs fixing

 

[CTXMedia]

Just tested it on my dev install too and not happening there.

I don't have admin.php .htaccess protected though - would that make a difference? Anyone able to test whether .htaccess makes a difference or not?

 

[MattW]

http://xenforo.com/community/threads/admin-php.44568/

Also does the same, so only need to contain admin.php in the title

 

[MattW]

Tested on my live site with .htaccess blocking all

<Files "admin.php">
Order Deny,Allow
Deny from all
</Files>

and also requesting valid user

AuthName "If you aren't Matt...."
AuthType Basic
AuthUserFile /home/z22se/.htpasswd
<FilesMatch "admin.php">
require valid-user
</FilesMatch>

Can't reproduce.

 

[Vincent]

I can view the thread the OP is linking to without a problem..

 

[MattW]

I can view the thread the OP is linking to without a problem..

I can now, so I guess someone has fixed something

 

[Adam Howard]

I can now, so I guess someone has fixed something

It would seem so....

Kind of wondering what the issue was..... Just in case anyone else happens to have the same problem

 

[MattW]

Yeah, would be nice, as it was definitely an issue

 

[Mike]

For reference, it was an overly greedy <FilesMatch> in Apache.