These forums have been archived and are now read-only.

The new forums are live and can be found at https://forums.eveonline.com/

EVE Technology Lab

 
  • Topic is locked indefinitely.
 

Warning: IGB incompatible with Apache 2.4 servers
Author
Previous Topic Next Topic
Jack Tronic
borkedLabs
#1 - 2013-06-03 17:48:04 UTC  |  Edited by: Jack Tronic
So I just got bit in the ass doing a server upgrade during EVE's downtime.

It turns out the use of underscores in the IGB headers is actually considered invalid by Apache 2.4

http://httpd.apache.org/docs/trunk/new_features_2_4.html
"Translation of headers to environment variables is more strict than before to mitigate some possible cross-site-scripting attacks via header injection. Headers containing invalid characters (including underscores) are now silently dropped. "

So that means in PHP for example, you will not get the HTTP_EVE_blah headers in $_SERVER.

So basically, don't upgrade to the latest Apache until CCP fix their mess.


Edit: https://forums.eveonline.com/default.aspx?g=posts&t=152695

Turns out there was a discussion before but it was locked. WHY CCP?
Steve Ronuken
Fuzzwork Enterprises
Vote Steve Ronuken for CSM
#2 - 2013-06-03 22:22:39 UTC
Threads are automatically locked, when they've not had any posts in them for, uh, a while.

Take a look at:
http://php.net/manual/en/function.apache-request-headers.php

if you want to access them.


There is discussion within CCP about what to do with the IGB, ranging from noting, to remove it, to replace it. Its not a small job however.

One thing:
'fixing' the mess would pretty much mean duplicating the headers. As everyone is using the current style.

Woo! CSM XI!

Fuzzwork Enterprises

Twitter: @fuzzysteve on Twitter
Joshua Foiritain
Coreli Corporation
Pandemic Legion
#3 - 2013-06-26 12:57:48 UTC  |  Edited by: Joshua Foiritain
Arrrggh lovely. Seems my host upgraded apache and apache_request_headers() wont work because apparently php is not setup as an apache module.

Various website claim the following function (http://stackoverflow.com/a/9276269) works as a replacement but this only seems to work on the default headers, not the eve-trust header. (Outputting all headers/trying to access the trust header directly both return nothing)

Anyone got any work around suggestions that dont require admin access to the server? :p I guess im stuck waiting X months/years for CCP to actually get around to looking at this.

The Coreli Corporation is recruiting.
NGRU Prospector
Just In Time Science
#4 - 2013-08-29 13:42:07 UTC
Im in the same boat did you ever get a fix for this?
Louis Vitton
Viziam
Amarr Empire
#5 - 2013-09-01 01:18:09 UTC
There was a .htaccess i saw which was meant to fix this issue for people a while ago. No idea if it works though sorry.