Projects ⇒ Bugs ⇒ #616: WebTV users cannot access admin.php (+ fix) ⇒ CPG Dragonfly™ CMS
Bug #616 WebTV users cannot access admin.php (+ fix)
Project: Dragonfly 9.0 -> 9.0.2 Category: *CPG Core Issues
Submitted: Monday, August 22, 2005 (05:35:00) Modified: Friday, September 02, 2005 (02:16:38)
Status: Closed Assigned to:
PHP Version: Irrelevant HTTPD Server: Apache 1.3

View/Vote Add Comment

by: dragonfly@snarkles.net
Description:
------------
I know this will only affect 0.000000004% of websites out there, but it just so happens that one of the admins for my site only has WebTV to access the Internet, so I needed to track this down and fix it.

The problem is that WebTV users cannot access admin.php. When they load the URL, they receive an error to the effect of "The web site has not authorized you to use it" and do not receive the login screen as expected. Since they can't login, they can't access any admin functions.

Reproduce code:
---------------
The problem is in admin.php, at the very bottom:

else {
header('HTTP/1.0 403 Forbidden')
login();
}

WebTV doesn't get past the 403 Forbidden... it simply notifies the user that they've been denied access to the page and that's that.

If you'd like to verify this error, MSNTV (who bought out WebTV) have a viewer you can download: http://developer.msntv.com/Tools/msntvvwr.asp



Expected result:
----------------
WebTV users should receive the login screen so that they can login to the admin panel and access its features.

My fix, although not the most elegant thing in the world, was as follows:

else {
/// WebTV hack
if (!strstr($_SERVER['HTTP_USER_AGENT'], 'WebTV')) {
header('HTTP/1.0 403 Forbidden');
}
/// End WebTV hack
login();
}

This removes the 403 notification from WebTV users, and allows them to access the login page.


Actual result:
--------------
If you'd like to verify this error for yourself, MSNTV offers a free viewer for download to emulate browsing via WebTV:

http://developer.msntv.com/Tools/msntvvwr.asp
by: akamu
This bug has been fixed in the CVS.

Snapshots of the sources are packaged every 6 hours; this change
will be in the next snapshot. You can grab the snapshot at the
Downloads section.

Thank you for the report, and for helping us to make CPG-Nuke 9.0 -> 9.0.2 better.

$Source: /cvs/html/admin.php,v $
$Revision: 9.18 $
$Author: akamu $
$Date: 2005/09/02 02:15:44 $
User Info

Welcome Anonymous



(Register)
Community

Support for DragonflyCMS in a other languages:

Deutsch
Español