new security problem with old netscape :: Archived

run0 · Supporter Offline Joined: Jun 28, 2004 Posts: 1559

I tried going to my site www.fitnecise.net using netscape, and was immediately banned for:

nknown user-agent

You are banned from this site due to a unknown user-agent.

but coming to this site I was not banned. what happened there?

using 9.1.0.5

xfsunoles

You didn't tell which Version of Netscape you use?

run0 · Supporter Offline Joined: Jun 28, 2004 Posts: 1559

true, its old, 4.06

DJ Maze

We don't have the UA specifics of 4.06 since it's very outdated.
Use the following script to provide us the info we need to allow it.

PHP:

<?php
echo $_SERVER['HTTP_USER_AGENT'];

DaveTomneyUK

Maybe it was not included with the user agent file because not many user netscape much now. I thought they stopped making new version of that program.

heroicimages · Newbie Offline Joined: Apr 19, 2006 Posts: 29

What about Safari 2.0.3 ? I get the same message at myndworx.com/ and dfmods.com/. But my own site works fine, and I'm here...

I'll try Firefox...

That's too bad -- it's fine with Firefox. One more thing Apple needs to fix in Safari, I guess!

alva

heroicimages wrote:

What about Safari 2.0.3 ? I get the same message at myndworx.com/ and dfmods.com/. But my own site works fine, and I'm here...

I'll try Firefox...

That's too bad -- it's fine with Firefox. One more thing Apple needs to fix in Safari, I guess!

For testing purposes would you please try if you can visit my site with your Safari browser?

xfsunoles

heroicimages wrote:

What about Safari 2.0.3 ? I get the same message at myndworx.com/ and dfmods.com/. But my own site works fine, and I'm here...

I'll try Firefox...

That's too bad -- it's fine with Firefox. One more thing Apple needs to fix in Safari, I guess!

Are you using an Intel Mac machine?

run0 · Supporter Offline Joined: Jun 28, 2004 Posts: 1559

forgot about this thread. anyway, had another problem today. user got the same message, and he's using "a new macbook pro. I've tried on firefox, safari, and IE."

if I add his IP to htaccess it will let him in correct?

xfsunoles

run0 wrote:

forgot about this thread. anyway, had another problem today. user got the same message, and he's using "a new macbook pro. I've tried on firefox, safari, and IE."

if I add his IP to htaccess it will let him in correct?

no, its Security Class need to identify UA or you can disable unknown UA by Security Admin. Security Class identify PPC Apple OS but not Intel Apple OS.

run0 · Supporter Offline Joined: Jun 28, 2004 Posts: 1559

xfsunoles wrote:

run0 wrote:

forgot about this thread. anyway, had another problem today. user got the same message, and he's using "a new macbook pro. I've tried on firefox, safari, and IE."

if I add his IP to htaccess it will let him in correct?

no, its Security Class need to identify UA or you can disable unknown UA by Security Admin. Security Class identify PPC Apple OS but not Intel Apple OS.

thanks, i'll do that for now.

so is this apple's fault or the security? I will report it as a bug if it hasn't been already, a workaround would be nice

alva

run0 wrote:

so is this apple's fault or the security? I will report it as a bug if it hasn't been already, a workaround would be nice

Yeah, you can report it.

It's about this code from includes/classes/security.php (lines 248-266)

PHP:

run0 · Supporter Offline Joined: Jun 28, 2004 Posts: 1559

I just remembered this is only in CVS so it will just be disregarded anyways.

alva

run0 wrote:

I just remembered this is only in CVS so it will just be disregarded anyways.

The last weeks/months most of the bugs and fixes in Projects are about cvs. That's because:

1) almost all 9.0.6.1 problems are non-existant in cvs even if only a few of the solutions are available as a true 9.0.6.1 patch/ branche.
2) the new features and approaches have introduced new problems that need to be dealt with, too.

ofigustavo

fast solution? change to a newest version of netscape, or firefox. Browsers too old have a lot of problems with websites,scripts,etc,etc,etc.